Most crypto is already quantum-exposed.
Exposure is not a future event — public keys leak the moment accounts transact, and they can be harvested today to be broken once a sufficient quantum computer exists. Here is the shape of the problem, and a live scanner to check any address yourself.
On EVM chains, the public key is recoverable from any transaction the account has ever signed — so every account that has moved funds is already exposed.
Independent analyses estimate roughly a quarter of all bitcoin sits in addresses that have already revealed their public key (early P2PK coins plus reused addresses). Estimate, not a live figure.
PQWeave scores quantum exposure live today across EVM, Bitcoin, Litecoin, Solana, Cardano, Cosmos, XRP, Algorand, Stellar, NEAR, and Aptos.
Three ways a key gets exposed
The exposure model determines what can be done about it. PQWeave classifies every chain into one of three families.
The public key can be recovered from any signature the account has produced. Exposure begins with the first outgoing transaction and is permanent.
Quantum-safe migration available — sweep into a post-quantum account.
The address is a hash of the public key, so the key stays hidden until the first spend reveals it. Unspent, never-reused addresses are still safe.
Transitional only — move funds to a fresh address; a permanent fix needs a protocol upgrade.
The public key is the address, so it is exposed the moment the account exists — before any transaction.
No application-layer fix — protection requires a protocol-level post-quantum upgrade.
Methodology
For each address, PQWeave looks at the chain's key model and the address's on-chain history: whether a public key has been revealed (an outgoing transaction on EVM, a spend on UTXO and account chains, or simply the address itself where the key is the address), the balance at risk, and address reuse. It scores exposure from safe to critical without ever touching a private key or taking custody. The macro figures above are cited independent estimates; the per-address result is computed live and verifiable.
Check any address
Paste an address from any of the 11 live chains and see its exposure score — no wallet connection, no custody.