A press release crossed my desk yesterday. AmericanFortress claims a quantum-safe encryption scheme that protects existing Bitcoin, Ethereum, and Solana wallets. No migration. No address change. The bytecode says nothing; the transaction log records no on-chain upgrade. My first reaction: verify or discard. After two decades in cryptography and four years auditing DeFi protocols, I have learned one immutable rule: the burden of proof rests on the claimant, not the skeptic.
Context: The Quantum Threat and the Migration Problem
The cryptographic community has known since 1994 that Shor's algorithm can break elliptic-curve cryptography (ECDSA, EdDSA) given a sufficiently powerful quantum computer. Current estimates place that threat 5–10 years away, but preparation takes a decade. The standard answer is migration to post-quantum signatures—NIST standardized CRYSTALS-Dilithium, Falcon, and SPHINCS+ in 2024. Every migration requires changing public keys, which means new addresses. A Bitcoin address is a hash of the public key; replacing its underlying algorithm breaks backward compatibility. That is why every serious quantum-readiness roadmap (Ethereum's, Bitcoin's) involves coordinated hard forks or address format changes. AmericanFortress claims to bypass this fundamental constraint. That is either a breakthrough or a break in logic.
Core: The Evidence Chain is Empty
I searched for technical details. There are none. No whitepaper. No GitHub repository. No peer-reviewed publication. No audit from a firm like Trail of Bits or Quantstamp. No team credentials. The press release offers no algorithm name, no key encapsulation mechanism, no zero-knowledge proof structure, no protocol diagram. The only claim is the outcome: wallets remain unchanged yet become quantum-resistant. Based on my 2017 Solidity audits, I know that when a project refuses to show code, it is usually because the code does not exist—or it is dangerous. The structure of the claim itself violates known cryptographic limits. To protect a Secp256k1-based address without changing its public key hash, one would need to embed a quantum-resistant verification layer into the existing script. That would either require a soft fork (which Bitcoin has not activated), a centralized oracle (which introduces trust issues), or a hardware security module (which defeats decentralization). None of these are mentioned.
Let me apply the same quantitative stress-testing I used in 2020 to evaluate Compound's liquidation models. Take a simple Bitcoin transaction: it spends a UTXO by providing a signature and public key. The network verifies that the public key hashes to the address and that the signature validates against that public key. To be quantum-safe, the signature algorithm must resist quantum attacks. But if the public key is still the hash of an ECDSA public key (as it must be, because addresses are unchanged), then the underlying public key algorithm is still ECDSA. The quantum-resistant feature must be added in the script or in a pre-image of the public key. The only way to do that without changing the address is to store a quantum-resistant public key somewhere else—for example, in the unlock script as an additional commitment. But that changes the transaction format and requires network-wide consensus to recognize the new script type. That is a protocol upgrade. So the claim either hides a protocol upgrade (which would require community approval) or relies on a mechanism that is not described. Data does not dream; it only records. The record here is empty.
Contrast with existing post-quantum projects. QANplatform requires its native blockchain. Algorand has a quantum-safe signature scheme but uses a different address format. The only way to make a legacy address quantum-safe without migration is to embed the resistance into the wallet software itself—via a trusted execution environment or a custodial layer. That is not a protocol solution; it is a centralized workaround. AmericanFortress's press release does not clarify. Pressure tests expose what calm markets hide. This scheme has not been pressure-tested by a single security researcher.
Contrarian: Correlation Does Not Imply Causation — PR Does Not Imply Code
A counter-argument exists: perhaps AmericanFortress has built a clever hybrid using zero-knowledge proofs that allow a transaction to be verified with a quantum-resistant proof that does not reveal the original public key. This is theoretically possible but requires a complete redesign of transaction scripts and full node validation. It also requires that the existing address hash be reinterpreted as a commitment to a quantum-resistant public key. That would break all existing wallet software that interprets the address as an ECDSA public key hash. The claim that "no address change is needed" may be true at the user interface level, but at the protocol level, everything changes. This is the same trap I saw in NFT floor-price anomalies in 2021: a simple metric (floor price) masked wash trading. Here, a simple claim ("no migration") masks enormous underlying complexity. The market may cheer the narrative, but the chain knows the truth. Silence in the logs speaks louder than tweets.
Furthermore, even if the scheme is technically sound, adoption would take years. Bitcoin and Ethereum communities are notoriously conservative about protocol changes. The EIP process for Ethereum's upcoming Pectra upgrade took 18 months just for consensus-layer tweaks. A quantum safety proposal that touches every address would require a multi-year debate, massive node upgrades, and backward compatibility testing. The timeline for real-world impact is 2028 at the earliest. That is not a near-term investment opportunity; it is a research topic. Reproducibility is the only currency of truth. No one can reproduce this claim because the data is not public.
Takeaway: Demand Code, Not Copy
The next time you see a press release about quantum-safe wallets without migration, ask for one thing: a reproducible test. Publish a single Bitcoin transaction that spends from an existing address using this scheme. Let the community verify it with a patched bitcoind. Until then, treat the claim as noise. Volatility is noise; structural flaws are signal. The structural flaw here is the absence of evidence. I will watch for a whitepaper. If it appears, I will audit it line by line. If it does not, I will mark this as another PR spike in a bull market that loves to price hope over reality. Trust the hash, verify the execution path. The hash of this press release is empty.