Live · 17 reserves · every result signed
Which keys will break. Where they are. Proof you measured it.
LatticeScan rates crypto reserves, banks and any public server for the quantum transition, from the outside, with no access and no cooperation. Every result is signed with the NIST post-quantum standard and its history anchored in Bitcoin.
Grade any domain the way a browser sees it. It reads only what is already public.
Quantum Solvency Index
livenot behind a revealed key
- El Salvador Strategic Bitcoin Reserve100.0%
- Twenty One Capital99.8%
- Bybit0.0%
- Binance-Peg BTC (BTCB) collateral0.0%
One engine, four surfaces
The same question, asked of everything that uses a public key
A quantum computer does not break one industry; it breaks the lock everyone uses. We measure crypto reserves first because the exposure there is exact and public, and the same scanner grades banks, cars and any company’s servers.
Index
Quantum Solvency Index
How much of each reserve sits behind a key that is already public. Read from the holder's own address list, re-scored on a schedule, signed and anchored.
Boards
Readiness boards
Every public server of a whole sector, graded for post-quantum key exchange. Banks, robotaxi companies, quantum-computing companies, chains and custodians.
Fleet Watch
Your estate and your suppliers, every week
Every server you and the companies you depend on run, re-scanned weekly, one alert when something gets worse, and a report your auditor can verify. The first scan is free.
Registry
Date your ownership before a key can be broken
A holder signs a statement naming a post-quantum key of their own; we anchor it in Bitcoin. When a quantum thief and the true owner can both sign, the record says who was first.
What the index has found
Same asset, very different reserves
Every coin in an address that has never spent. The key has never been shown.
68,200 BTC behind one key, public for years. Moving it costs about $12 in fees.
1,534,096 unspent outputs. Moving them needs days of the whole chain's block space.
20,911 signatures read across every reserve. A reused nonce leaks a key today, with no quantum computer.
How it works
From the outside, the way a browser sees you
No agent, no access to your systems, nothing to install. The method is an open specification and anyone can re-run it.
Discover
We read the public Certificate Transparency logs to find every hostname a domain has certificates for, including the ones people forgot about.
Test
We open the same TLS handshake your browser makes and offer each endpoint only post-quantum key exchange. If it accepts, it is safe. If it refuses, it is not.
Inventory
Everything is compiled into a cryptographic inventory with a grade, exportable as a CBOM, the file format the US government told CISA to define.
Why it is already urgent
The deadline is set, and traffic is being recorded now
Attackers do not need a quantum computer today. They can record encrypted traffic now and decrypt it once one exists. Anything that must stay private past the mid-2030s is already at risk, and that is the part you can close today.
Will your data outlive its encryption? Work it out →RSA and elliptic-curve signatures and key exchange at 112-bit strength: allowed, but on notice. NIST IR 8547.
No longer permitted for US federal systems. Auditors and insurers take their cue from the same table.
EU financial entities must keep an encryption policy that follows developments in cryptanalysis, and manage keys through their lifecycle.
News
What changed, and what it means
- Are the banks quantum-safe? We checked 44 of them.
- Sealed commitments: registering an address without giving its key away
- The index now reads how each reserve is actually spent
Stay tuned
LatticeScan keeps changing as this field does. Leave your email and we send an update when there is something worth knowing.