{
  "chain_slug": "solana",
  "name": "Solana",
  "scorecard_profile": "L1",
  "evaluated_at": "2026-04-18",
  "evaluator": "layerqu-v2-scoring-agent-4",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.15,
      "score": 38,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 15,
          "primitives_named": [
            "Ed25519 (EdDSA over Curve25519)",
            "SHA-256 (Proof of History)",
            "Keccak-256 (programs)",
            "BLS (tower BFT)"
          ],
          "evidence": [
            "https://www.helius.dev/blog/solana-post-quantum-cryptography",
            "https://solana.com/developers/docs"
          ],
          "note": "Good inventory from v1. BLS usage in tower BFT named by agent context."
        },
        "1b_shor_grover_pq_tag": {
          "score": 15,
          "tags": {
            "Ed25519": "Shor-break",
            "SHA-256": "Grover-weaken",
            "Keccak-256": "Grover-weaken",
            "BLS": "Shor-break"
          },
          "evidence": [
            "https://www.helius.dev/blog/solana-post-quantum-cryptography"
          ]
        },
        "1c_algorithm_family_diversity": {
          "score": 2,
          "families_represented": 1,
          "families": [
            "Hash-based (Winternitz community vault, opt-in only)"
          ],
          "note": "Community Winternitz Vault is opt-in, not core. Zero families in core."
        },
        "1d_nist_security_category": {
          "score": 4,
          "mappings": {
            "Ed25519": "128-bit classical, 0 post-quantum",
            "SHA-256": "128-bit post-quantum"
          },
          "note": "No NIST PQC category mapped — no PQC scheme in core."
        },
        "1e_implementation_quality": {
          "score": 10,
          "formal_verification": "none published",
          "constant_time": "Ed25519 standard constant-time",
          "libraries": [
            "ed25519-dalek",
            "Agave validator"
          ],
          "evidence": [
            "https://github.com/anza-xyz/agave"
          ]
        }
      },
      "total_artifacts": 4
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 22,
      "sub_scores": {
        "2a_active_key": {
          "score": 4,
          "note": "100% of Solana accounts have Ed25519 pubkey = address. No hash protection. Full TVL quantum-exposed.",
          "evidence": [
            "https://solana.com/developers/docs/core/accounts"
          ]
        },
        "2b_cold_key": {
          "score": 4,
          "note": "100% exposed (same as active). No distinction between cold/hot."
        },
        "2c_sig_long_term": {
          "score": 8,
          "note": "Tx-once-and-done for most use cases. Lower long-term forgery risk than Bitcoin."
        },
        "2d_encryption_conf": {
          "score": 6,
          "note": "Validator gossip uses TLS (RSA/ECDH). Undeclared PQC migration for RPC."
        }
      },
      "total_artifacts": 2
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.13,
      "score": 32,
      "sub_scores": {
        "3a_graph_visibility": {
          "score": 5,
          "note": "Pseudonymous, fully transparent transaction graph."
        },
        "3b_rpc_concentration": {
          "score": 8,
          "note": "Helius, QuickNode, Triton dominate RPC. High concentration.",
          "evidence": [
            "Public RPC provider data"
          ]
        },
        "3c_bridge_correlation": {
          "score": 10,
          "note": "Wormhole, Portal, deBridge all visible. Full correlation."
        },
        "3d_retroactive_deanon": {
          "score": 9,
          "note": "Low additional retroactive risk — already transparent."
        }
      },
      "total_artifacts": 1
    },
    "4_migration_architecture": {
      "weight": 0.1,
      "score": 20,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 5,
          "note": "Fixed Ed25519 at protocol level. Adding new signature types requires SIMD + validator upgrade.",
          "evidence": [
            "https://www.quantumcanary.org/insights/is-solana-ever-going-to-become-quantum-secure"
          ]
        },
        "4b_aa_key_rotation": {
          "score": 4,
          "note": "No native AA. PDAs provide program-level flexibility only."
        },
        "4c_hard_fork_track_record": {
          "score": 6,
          "note": "Feature gates + SIMD process. 16 months uptime. History of outages (2022-2023) flags coordination concerns."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 5,
          "note": "Transaction size limit raised to 4,096 bytes (2026) accommodates larger sigs. No hybrid envelope deployed."
        }
      },
      "total_artifacts": 3
    },
    "5_deployment_execution": {
      "weight": 0.22,
      "score": 10,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 1,
          "mainnet_pqc_pct": 0.01,
          "evidence": [
            "https://github.com/deanmlittle/solana-winternitz-vault"
          ],
          "note": "Winternitz Vault deployed on mainnet (community, opt-in, hash-based OTS). Usage <0.1% of tx volume."
        },
        "5b_pqc_code_in_consensus": {
          "score": 0,
          "loc_or_bytes": 0,
          "note": "No PQC in Agave or Firedancer validator clients."
        },
        "5c_validator_pqc_keys": {
          "score": 0,
          "pct": 0
        },
        "5d_published_milestones": {
          "score": 4,
          "count": 1,
          "milestones": [
            "Project Eleven testnet PQ signatures (2025)"
          ]
        },
        "5e_pqc_washing_delta": {
          "score": 5,
          "ratio": 1.2,
          "note": "Moderate — Project Eleven announcements exceed shipped mainnet."
        }
      },
      "total_artifacts": 3
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.22,
      "score": 8,
      "sub_scores": {
        "6a_wallet": {
          "score": 2,
          "top3": [
            "Phantom",
            "Solflare",
            "Backpack"
          ],
          "pqc_roadmap_count": 0
        },
        "6b_bridge": {
          "score": 2,
          "top3": [
            "Wormhole",
            "deBridge",
            "Portal"
          ],
          "pqc_roadmap_count": 0
        },
        "6c_custodian": {
          "score": 2,
          "top3": [
            "Coinbase Custody",
            "Fireblocks",
            "BitGo"
          ],
          "pqc_roadmap_count": 0,
          "note": "Fireblocks announced PQC research only."
        },
        "6d_rpc_hsm": {
          "score": 2,
          "top3": [
            "Helius",
            "QuickNode",
            "Triton"
          ],
          "pqc_roadmap_count": 0
        }
      },
      "total_artifacts": 1
    },
    "7_governance_coordination": {
      "weight": 0.08,
      "score": 42,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 15,
          "note": "Nakamoto coefficient 31 — highest among PoS.",
          "evidence": [
            "https://chainspect.app/dashboard/decentralization"
          ]
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 10,
          "note": "Recovered from 2022-2023 outages. Feature gate coordination demonstrated."
        },
        "7c_named_coordination_lead": {
          "score": 10,
          "note": "Solana Foundation + Anza. No named PQC lead."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 7,
          "note": "Post-FTX recovery demonstrated. No PQC-specific adversarial coordination."
        }
      },
      "total_artifacts": 2
    }
  },
  "gates": {
    "hybrid_deployment": "FAIL",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "Mosca (5a<20% → QRI max 60)",
    "Sutor (5d count=1 but named — Migration Stage max 2)",
    "Casado (4+ tiles pqc=0 → migration_stage max 3)",
    "Hybrid gate FAIL → QRI cap 60"
  ],
  "qri": {
    "raw": 20,
    "after_caps": 20,
    "ci_plus_minus": 10,
    "band": 2,
    "band_name": "Acknowledged"
  },
  "migration_stage": 1,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "5-10 (EOA-like, pubkey=address)",
    "Y_migration_time_years_range": "10-15",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": true
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 5,
      "privacy_preserved_pct": 10
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 85,
      "privacy_preserved_pct": 75
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 40,
      "privacy_preserved_pct": 40
    }
  },
  "burn_vs_rescue_policy": "undeclared",
  "pqc_washing_ratio": 1.2,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "Phantom",
        "Solflare",
        "Backpack"
      ],
      "pqc_roadmap_count": 0
    },
    "bridge": {
      "top3": [
        "Wormhole",
        "deBridge",
        "Portal"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [
        "Coinbase Custody",
        "Fireblocks",
        "BitGo"
      ],
      "pqc_roadmap_count": 0
    },
    "rpc_hsm": {
      "top3": [
        "Helius",
        "QuickNode",
        "Triton"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "Solana is Band 2 (Acknowledged). Ed25519 + BLS tower BFT are fully quantum-exposed — 100% of accounts have pubkey = address, no hash protection. Project Eleven testnet partnership shows awareness; Winternitz Vault on mainnet is community-only and opt-in. No protocol-level PQC, no hybrid envelope, no published dated roadmap. Helius analysis suggests 'wait for efficient PQC schemes'. Mosca X+Y (15-25y) > Z50 (15y) = danger zone.",
  "evaluator_notes": "Ed25519 exposure on Solana is structurally worst-case: pubkey=address with no hash wrapper. Post-FTX uptime recovery is the strongest governance signal. Migration stage capped at 2 due to zero published dated milestones with verifiable outcomes.",
  "narrative_voiced": "Solana's problem is structural and simple: the public key is the address. 100% of accounts fully exposed on first view, no hash wrapper. Project Eleven is testnet, Winternitz Vault is community opt-in, Helius itself says 'wait for efficient PQC schemes'. Nakamoto 31 does not save Ed25519."
}