MANTA PACIFIC · ROLLUP-L2 · STAGE 0 NO PQ POSTURE; MILESTONE-DISCIPLINE CAP BINDS AT ≤ 2 · QRI 11 v3.1.0 methodology

In plain terms

What it is. Manta Pacific is a network built on top of Ethereum that promises cheaper, faster transactions, and the advanced design it markets is a future plan rather than the system running today.

What we found. What is live now is an older, ordinary setup run by one company, and we found no sign anywhere that the team has thought about the day a powerful new kind of computer can break the locks guarding everyone's funds.

Why it matters. You may be trusting a network for what it says it will become, while the version holding your money has a single point of failure and no answer for a threat that is already on the horizon.

Ethereum L2 currently operating as an Optimium: OP Stack optimistic rollup (Caldera-deployed op-geth) with Celestia DA and Ethereum settlement. The widely cited Polygon CDK / Plonky2 zkEVM architecture is roadmap-only; live mainnet remains Chapter 1 OP Stack. No public PQ statement, no PQC repository, no PQC mention.

inLinkedIn ↷Audit access ⇆Compare Verified 2026-05-01

Summary

Manta Pacific is an Ethereum L2 currently operating as an Optimium: an OP Stack optimistic rollup (Caldera-deployed op-geth) with Celestia data availability and Ethereum settlement. The fraud-proof system is under development per L2BEAT; users trust a centralized sequencer. The widely cited Polygon CDK / Plonky2 zkEVM architecture was announced October 2023 as Chapter 3 of a four-chapter roadmap; the public docs as of mid-2025 still describe the live mainnet as Chapter 1 (OP Stack optimistic rollup). The active cryptographic surface is therefore Ethereum-equivalent: ECDSA secp256k1 for accounts, BLS12-381 in Ethereum settlement-proof verification, Ed25519 in Celestia DA validators, Keccak-256 throughout. No ZK prover is in production today on Manta Pacific. There is no public post-quantum cryptography statement from the Manta Network team, no PQC repository in the Manta-Network GitHub organization, and no PQC mention on manta.network or in docs.manta.network. Raw QRI: 14. After-cap QRI: 11. Band: 1 Unaware. Migration Stage: 0. Confidence interval: plus-minus 13. Key uncertainties: timing of OP→Polygon CDK migration, ECDSA exposure on a $100M-scale L2 with sub-2-year history, Manta Atlantic deprecation effect on team focus.

What the gates say

Gate 1a, Hybrid signature: FAIL , no documented hybrid signature composition; ECDSA secp256k1 sole transaction-signing scheme
Gate 1a, Hybrid KEM: FAIL , RPC TLS uses classical X25519/RSA via Caldera/Ankr/QuickNode/Dwellir endpoints; no hybrid IETF-draft KEM
Gate 1b, Commit-to-hash: COND , 1a-Sig is not OR-composition, single-scheme
Gate 2, Evidence reconstruction: PASS , every sub-score ≥3 URLs except where structurally limited; all sub-scores reconstructible
Gate 3, Primitive naming: PASS , every primitive named: ECDSA secp256k1, Ed25519, BLS12-381, BN254-KZG, Keccak-256, SHA-256

Burn-vs-rescue policy on file

Declared option f, Undeclared. Manta Network has published no policy on what happens to ECDSA-locked balances post-Shor. Inherits whatever Ethereum L1 ultimately decides; no Manta-specific declaration.

Seven dimensions

Each dimension scores 0–100 internally; the weighted roll-up produces the QRI.

1 Cryptographic Exposure weight 12% 22 / 100

1a · primitive inventory 9 / 20

EVM equivalence implies ECDSA secp256k1 for EOAs. Celestia DA validators use Ed25519. ZK proving system named in roadmap (Polygon CDK zkEVM) but not active on mainnet.

Primitives: ECDSA secp256k1 (EOAs) · Keccak-256 (state, hashing) · Ed25519 (Celestia validator signatures) · BLS12-381 (Ethereum consensus path, settlement) · Polygon CDK zkEVM PLONK over BN254 with KZG (roadmap, not deployed)

1b · shor grover pq tag 9 / 20

Tags:

ECDSA secp256k1 → Shor-break-via-DL-without-pairings
Ed25519 (Celestia DA) → Shor-break-via-DL-without-pairings
BLS12-381 (Ethereum settlement) → Shor-break-via-pairings
Keccak-256 → Grover-weaken (256→128 bit)
SHA-256 (Ethereum) → Grover-weaken
Polygon CDK zkEVM PLONK-KZG over BN254 (roadmap) → Shor-break-via-pairings

1c · family diversity 0 / 20

0 PQC families deployed. All primitives are pre-quantum.

1d · nist security category 0 / 20

No NIST PQC primitives deployed.

1e · implementation quality 4 / 20

No formal verif Manta-specific (op-geth + Caldera infra inherits Ethereum-foundation audit posture). Standard Ethereum libraries. op-geth fork (Ethereum-Optimism), Caldera-managed deployment, Celestia node. Stateless schemes only. Cryptanalytic tier 1-2.

2 Quantum Recovery Exposure weight 8% 14 / 100

Forge subtotal: 11/75 Decrypt subtotal: 3/25

2a · active key exposure 4 / 25

ECDSA secp256k1 EOAs are quantum-vulnerable on every signed transaction (mempool reveals pubkey). Manta Pacific mainnet launched September 2023.

2b · cold key exposure 4 / 25

Inherits Ethereum ECDSA model. L2 cold-key exposure bounded by L2 history (since Sept 2023). Bridge-locked ETH/USDC on Manta-side ledgers are quantum-vulnerable. EVM EOAs only, no P2PK-style exposed-pubkey UTXO model.

2c · sig long term validity 3 / 25

ECDSA secp256k1 historical L2 transactions forgeable post-Shor. State-root submissions to L1 Ethereum signed by centralized proposer key. Celestia DA blob commitments signed Ed25519 (Shor-break).

2d · encryption confidentiality hndl 3 / 25

Standard TLS X25519/RSA on RPC endpoints. Celestia gossipsub uses classical handshake. No hybrid PQC KEM in any documented part of the stack.

3 Metadata, Anonymity & Confidentiality weight 8% 20 / 100

3a · tx graph visibility 5 / 20

Pseudonymous EVM. Block explorer renders all calldata, bridge events, and state transitions in clear. No private-tx mode on Manta Pacific (privacy work historically lived on Manta Atlantic, deprecating 2026-08-01).

3b · rpc mempool concentration 5 / 20

Centralized sequencer (Caldera-operated). Top RPC providers: Manta RPC (Caldera), Ankr, QuickNode, Dwellir. Validator metadata retention undeclared.

3c · cross chain bridge correlation 5 / 20

Manta Pacific Native Bridge, LayerZero, and Celer cBridge link source/destination. Celestia DA blob namespacing also exposes per-rollup activity. Two correlation surfaces (Ethereum bridge + Celestia DA).

3d · retroactive de anonymization 5 / 20

Manta Pacific is non-private by design (privacy story was Manta Atlantic on Polkadot, deprecating Aug 2026). No on-chain ElGamal/ring-sig content to retroactively decrypt.

3e · mixnet shuffle 0 / 20

None. No on-chain mixing, no commit-reveal, no cMix-class structural mix.

4 Migration Architecture weight 15% 51 / 100

4a · crypto agility 6 / 15

Inherits Ethereum hard-fork agility and EIP-7702 (Pectra activated 2025-05-07). Manta Pacific does not document its own Pectra-equivalence date or crypto-agility track. Dual-layer architecture (settlement-on-Ethereum + DA-on-Celestia) requires alignment across two foundations Manta does not control.

4b · aa key rotation 8 / 20

EVM equivalence implies ERC-4337 deployable on Manta Pacific. EIP-7702 on Manta Pacific not separately documented, depends on Pectra-equivalence rollout via Caldera op-geth fork. No Manta-specific AA tooling. No client-layer PQC path.

4c · hard fork track record 7 / 15

Manta Pacific mainnet launched September 2023 and integrated Celestia DA on mainnet. Caldera-managed op-geth has tracked Ethereum upgrade cadence. No contested forks.

4d · hybrid deployment readiness 5 / 15

No hybrid PQ deployment plan published. Architecturally possible because EVM equivalence inherits whatever Ethereum L1 ships, but Manta Pacific cannot ship hybrid before Ethereum + Polygon CDK + Celestia all do.

4e · stateful hash state management 15 / 15

Stateless schemes only (ECDSA, Ed25519). XMSS/LMS not in stack.

4f · bft aggregation path 0 / 20

N/A, Manta Pacific does not run own BFT consensus. Sequencer is single-operator (Caldera). Celestia DA uses Tendermint Ed25519 (non-aggregating).

5 Deployment Execution weight 22% 15 / 100

5a · mainnet pqc traffic pct 0 / 25

No PQC primitives deployed on Manta Pacific mainnet.

5b · pqc code in consensus client 0 / 15

Caldera-managed op-geth fork; no PQC commits in Manta-Network GitHub org. No PQC bytes in production client.

5c · validator pqc key adoption 0 / 15

Single centralized sequencer (Caldera-operated). No validator PQC keys in use. Celestia DA validators are not Manta validators.

5d · published dated milestones 0 / 10

VOIDED to 0 per v3.1 5d-conditional-on-5a rule. No PQC-specific milestones with enforcement-mechanism evidence.

5e · pqc washing delta 15 / 15

Announced PQC (trailing 12mo): 0. Shipped PQC: 0. Ratio: 0/0. No announcement-to-shipped, no PQC announcement from Manta Network.

5f · signature footprint multiplier 0 / 20

Undisclosed (no PQ signing on mainnet, no published bytes-per-block analysis).

6 Supply Chain Vendor Readiness weight 25% 6 / 100

6a · wallet 2 / 25

Top-3: MetaMask, Rabby, WalletConnect. PQC roadmap count: 0.

6b · bridge 1 / 25

Top-3: Manta Native Bridge, LayerZero, Celer cBridge. PQC roadmap count: 0.

6c · custodian 2 / 25

Top-3: Coinbase Custody, BitGo, Fireblocks. PQC roadmap count: 0 (Fireblocks has PQC research statements but no production roadmap).

6d · rpc hsm tee infra 1 / 25

Top-3 RPC: Caldera-managed Manta RPC, Ankr, QuickNode. HSM/TEE not declared. PQC roadmap count: 0.

7 Governance & Coordination weight 10% 19 / 100

7a · validator stake distribution 4 / 20

Single centralized sequencer (Caldera-operated). Nakamoto coefficient effectively 1. Settlement security inherits Ethereum. DA security inherits Celestia.

7b · upgrade cadence under pressure 6 / 20

Coordinated Celestia DA mainnet integration; ongoing Polygon CDK migration timeline announced Oct 2023, expected 6-9 months, still in progress mid-2025. Pectra inheritance via Caldera op-geth, no publicly documented Manta-specific upgrade timestamp.

7c · named coordination lead 6 / 20

Manta Network team led by named co-founders (COO of P0x Labs, co-founder). No named PQC lead, no PQC working group, no foundation post on quantum readiness.

7d · adversarial coordination precedent 3 / 20

Limited precedent. Mainnet launched Sept 2023; no headline-level adversarial security incident requiring coordinated cryptographic change. Manta Atlantic deprecation announcement is operational consolidation, not adversarial response.

7e · canary tripwire mechanism 0 / 20

None documented. No honeypot, no rate-limit, no cryptographic tripwire embedded in consensus.

X + Y vs Z, when does the math turn against you?

v3.1 demotes the X+Y vs Z timing test to a secondary signal, the headline output is Migration Stage. The timing test still answers the question: can this chain finish migrating before the threat lands?

X, signature shelf life

4-8 years

Y, migration time

10-15 years to Stage 5

Z10 (10% CRQC year)

2030

Z25 (25% CRQC year)

2035

Verdict

X+Y midpoint ~2044, Outside risk window (vs Z25 2035); Crisis Zone (vs Z10 2030)

Z-compliance

Outside compliance window, X+Y midpoint 2044 > NIST 2035 disallowance

Source-disagreement disclosure

v3.1 requires every chain card to publish material divergences among authoritative sources, plus the delta-QRI under alternative weighting.

Architecture description divergence

Manta Network medium posts and aggregator descriptions often present Manta Pacific as a Polygon CDK zkEVM with Celestia DA, matching announced Chapter 3 architecture. L2BEAT and Manta technical-resources docs describe the live mainnet as Chapter 1: OP Stack optimistic rollup. This audit takes L2BEAT + foundation-docs description as authoritative and flags the marketed architecture as future state.

Caldera RaaS layer dependency

Manta Pacific's sequencer, RPC, and op-geth fork are operated by Caldera. Caldera has no published PQC roadmap. A future Caldera-tier supply-chain finding would compound across every Caldera-deployed L2.

Delta-QRI under alternative weighting

Under alt-weights with Dim 4 at 22% / Dim 5 at 15%, QRI rises by ~+4 to ~15. Under standard v3.1 weights, QRI stays at 11. Even favorable alt-weighting keeps Manta Pacific in Band 1.