Quantum threat approaches: Why is Solana betting all on Falcon?

On April 27, 2026, the Solana Foundation officially released a quantum-ready roadmap. This document, co-authored by Anza and Jump Crypto's Firedancer team, has a concise and clear core message: two independent validator client development teams, without prior coordination, each completed evaluations of post-quantum signature schemes and ultimately converged on the same one—Falcon.

This technical consensus was reached as the timeline for quantum computing threats was significantly compressed. On March 31, 2026, Google Quantum AI, in collaboration with Ethereum Foundation researchers and a Stanford professor, published a 57-page white paper that reduced the number of physical qubits required to break the 256-bit elliptic curve discrete logarithm problem from millions to under 500k. This estimate is about 20 times lower than the previous best-known estimate.

According to Gate market data, as of June 29, 2026, Solana's current price is $72.73, up 2.48% in the past 24 hours, up 1.01% in the past 7 days, but down 12.18% in the past 30 days, and down 52.59% in the past year. In this market environment, will the long-term structural risk of quantum threats affect the long-term valuation logic of public blockchains? Can Solana's technical decision to bet on Falcon become the industry standard for the post-quantum blockchain era? This article analyzes from three dimensions: the technical advantages of Falcon over other post-quantum signature schemes, the engineering approach of parallel development by the Anza and Firedancer teams, and the potential impact of the quantum threat timeline on blockchain valuations.

Falcon's Differentiated Advantage: Why It?

The core challenge of post-quantum cryptography is that, in the face of quantum computers, the elliptic curve digital signature algorithm (ECDSA) and its variant Ed25519, widely used in current blockchains, will lose their security foundation. Shor's algorithm can break the discrete logarithm problem in polynomial time, meaning that once fault-tolerant quantum computers with sufficient qubits become a reality, it will be possible to derive private keys from public keys exposed on-chain.

The National Institute of Standards and Technology (NIST) has launched multiple rounds of post-quantum cryptography standardization. The digital signature schemes currently in the final candidate stage mainly include three types: lattice-based Falcon (FN-DSA) and Dilithium (ML-DSA), and hash-based SPHINCS+ (SLH-DSA). All three schemes meet post-quantum security level requirements, but there are significant differences in engineering adaptability.

Signature size is the primary constraint for blockchain applicability. The Ed25519 signature currently used by Solana is very compact: 32-byte public key, 64-byte signature. Falcon-512 has a public key of 897 bytes and a signature of approximately 666 bytes—although this is about 10 times larger, it is the smallest signature among NIST's selected post-quantum standards. In comparison, Dilithium2 has a signature of about 2,420 bytes, and SPHINCS+ signatures exceed 17 KB. For a public chain designed for high throughput, the difference in signature size directly translates into multiplied storage costs, bandwidth consumption, and verification delays.

Verification efficiency is the second key constraint. Jump Crypto notes that Falcon's signature verification is based on integer arithmetic, making implementation relatively simple, and signature generation is performed off-chain. This means network nodes do not incur complex computational overhead when verifying transactions. The SIMD-0461 proposal specifically adds a system call (syscall) for Falcon-512 signature verification in Solana, allowing smart contract developers to directly call post-quantum signature verification functionality.

The NIST standardization timeline also provides institutional assurance for Falcon. Falcon (FN-DSA) has been selected for the draft FIPS 206 standard, with final publication expected in late 2026 or early 2027. This means Solana is not choosing a lab scheme or community fork, but an official standard that will receive Federal Information Processing Standard (FIPS) endorsement.

Algorand completed the mainnet integration of Falcon signatures in May 2026 and plans to launch Falcon-1024 account support in the third quarter of 2026. This further validates Falcon's feasibility in a real blockchain environment.

Anza and Firedancer: The Strategic Value of a Dual-Team Approach

The most noteworthy aspect of Solana's quantum-ready roadmap is not the technical selection itself, but the decision-making mechanism behind it—the Anza and Firedancer teams reached completely consistent conclusions after independent research.

Anza is a development team composed of former Solana Labs core engineers, responsible for maintaining Solana's mainnet client Agave. Firedancer, developed by Jump Crypto, is one of the highest-performing validator clients on the Solana network. Together, the two teams represent the vast majority of staked share on the Solana network. This decision-making model of "dual-team independent verification, naturally converging conclusions" is extremely rare in decentralized governance practice, and its core value is embodied in three aspects.

First, it reduces systemic risk from a single technical path. In traditional public chain development models, the core team's technical judgment often lacks cross-validation from independent engineering teams. Anza and Firedancer, starting from different engineering architectures, independently evaluated various indicators of post-quantum signature schemes—signature size, verification speed, code complexity, compatibility with existing systems—and ultimately both pointed to Falcon. This process itself is a stress test for the technical selection.

Second, parallel development accelerates engineering deployment. Both teams have released initial implementations of Falcon on their respective GitHub repositories. Anza's GitHub data shows that the development team has been advancing Falcon-related work since at least January 27, 2026. On the Firedancer side, its validator client has quietly gone live on Solana's mainnet and started producing blocks, processing tens of millions of transactions over the past few months. Currently, Firedancer controls about 7% of the network's staked weight, and this proportion is being deliberately increased slowly to ensure network stability. The parallel progress of both teams means that once a quantum threat is deemed a "credible risk," Solana can complete a full network migration much faster than a single team could.

Third, it provides an engineering foundation for decentralization in the post-quantum era. One of Firedancer's original development goals was to address Solana's prior over-reliance on a single dominant client maintained by Anza. Firedancer founding engineer Ritchie Patel characterized the relationship as "cooperation, not competition." In a quantum migration—a critical infrastructure upgrade involving the entire network's security—the simultaneous readiness of two independent clients means the network will not be entirely exposed to risk due to the upgrade delay of one client.

Quantum Threat Timeline and Blockchain Valuation Impact

Understanding the urgency of Solana's actions requires placing them within the macro framework of the quantum threat timeline.

Technical Timeline: From "Decades" to "Years." The Google white paper on March 31, 2026, was a key turning point that compressed this timeline. The research shows that breaking the 256-bit elliptic curve discrete logarithm problem requires fewer than 500k physical qubits and can be done in minutes. Google simultaneously set its own internal deadline for post-quantum cryptography migration as 2029.

The industry's interpretation of this timeline varies across different levels. Project Eleven developed three scenario projections for Q-Day (the point at which quantum computing threatens encryption security): optimistic scenario 2030, neutral scenario 2033, and pessimistic scenario pushed to 2042. A Bernstein research report indicates that Bitcoin and the crypto industry have about a 3 to 5-year window to complete the transition to quantum security. Even considering that the Google white paper reduced the resource estimate by about 20 times, actually reaching a level to attack mainstream public chains still requires the stable operation of thousands or even tens of thousands of logical qubits.

Structural Differences in Risk Exposure. Not all addresses face the same quantum risk. In the Bitcoin network, P2PK (Pay-to-Public-Key) addresses expose public keys directly on-chain without hash protection, making them the most vulnerable type, containing about 1.7 million BTC, roughly 8% of the total supply. Ark Invest noted in its March analysis that about 35% of Bitcoin supply is held in addresses that may face future quantum risk.

For Solana, its Ed25519 signature scheme belongs to the same elliptic curve cryptography family as Bitcoin's ECDSA. Any address that has ever broadcast a transaction (thus exposing its public key) theoretically faces the risk of an "on-spend" attack once quantum computers reach the necessary threshold. This is why the Solana Foundation emphasizes "no immediate need for protocol changes, but the migration path is ready"—the threat window has not yet closed, but it is narrowing.

Transmission Mechanism of Valuation Impact. The impact of quantum threats on public chain valuations is not linear but transmitted through three pathways.

The first is the "security discount." In the context of a clearly compressed quantum threat timeline, public chains lacking a clear post-quantum migration path may face a risk premium increase from long-term investors. One of the core objectives of Solana's roadmap release is to enhance long-term investor confidence by demonstrating a verifiable response plan.

The second is the "first-mover premium." After Zcash (ZEC) announced its quantum protection roadmap in May, its token price rose over 110% in the past month. This shows that the market is willing to pay a premium for projects that are first to establish a quantum-safe narrative. Solana's roadmap puts it alongside Ethereum, Zcash, and Ripple as at least the fourth major blockchain preparing for a post-quantum future.

The third is "migration costs." Falcon signatures are about 10 times the size of Ed25519, meaning storage and bandwidth costs per transaction will increase. However, the Solana Foundation indicates that the migration is manageable and network performance is not expected to be significantly affected. If this judgment holds, the impact of migration costs on Solana's valuation will be limited; if actual performance degradation exceeds expectations, it could weaken Solana's throughput advantage relative to other public chains.

Conclusion

Solana's bet on Falcon is essentially about finding a post-quantum survival path for a public chain whose core competitiveness is speed. Among the three NIST-standardized post-quantum signature schemes, Falcon stands out with the smallest signature size and relatively simple verification logic—exactly what a high-throughput blockchain needs to maintain its core competitiveness in the face of quantum threats.

The unanimous choice by the independent Anza and Firedancer teams provides a decentralized verification mechanism for this technical decision. Two client teams representing the vast majority of network staked share reached consensus without coordination—this is extremely rare in public chain governance and constitutes a trust foundation that cannot be overlooked in Solana's quantum-ready narrative.

The quantum threat timeline is shifting from "distant theoretical discussion" to "an engineering issue that must be addressed within a few years." Google has set 2029 as its own post-quantum migration deadline, while the industry's optimistic, neutral, and pessimistic scenarios for Q-Day point to 2030, 2033, and 2042 respectively. Within this time frame, Solana's Falcon roadmap is not an isolated upgrade announcement, but the starting signal for a race about "which public chain can survive the post-quantum era first."

For investors, quantum security is becoming a non-negligible variable in Layer 1 public chain valuation models. Those public chains that can demonstrate a clear migration path, have completed engineering verification, and have manageable migration costs will enjoy a significant "security option premium" when the quantum threat materializes. Solana has made the first move in this race—but the game has just begun.

FAQ

Q1: What is the difference between Falcon signatures and the Ed25519 signatures currently used by Solana?

Ed25519 signatures have a 32-byte public key and a 64-byte signature, based on elliptic curve cryptography, and are insecure against quantum computers. Falcon-512 has an 897-byte public key and a signature of about 666 bytes, based on lattice cryptography, and can resist quantum attacks. Falcon's signature size is about 10 times that of Ed25519, but it is the most compact scheme among NIST's post-quantum standards.

Q2: What is the relationship between Anza and Firedancer?

Anza is a team composed of former Solana Labs core engineers, maintaining Solana's mainnet client Agave. Firedancer, developed by Jump Crypto, is another validator client for Solana. The two are in a cooperative rather than competitive relationship. Firedancer has gone live on mainnet, processing tens of millions of transactions, and currently controls about 7% of the network's staked weight.

Q3: When will quantum computers actually threaten blockchain?

Mainstream industry opinions differ. Project Eleven's three scenario projections are: optimistic 2030, neutral 2033, pessimistic 2042. Google has set its own post-quantum migration deadline at 2029. Bernstein believes the industry has a 3 to 5-year window. It should be noted that there is still a huge engineering gap from physical qubits to logical qubits capable of stably running Shor's algorithm.

Q4: When will Solana's quantum migration begin?

The Solana Foundation explicitly stated that "no immediate protocol changes are needed." The roadmap adopts a phased strategy: Phase 1 continues to deepen Falcon research and testing; Phase 2 introduces post-quantum solutions for new wallets once the quantum threat becomes a credible risk; Phase 3 completes the full migration of existing wallets. Both teams have released initial Falcon implementations, and engineering preparations are ready.

Q5: Are other public chains also preparing for quantum resistance?

Yes. The Ethereum Foundation launched the "Post-Quantum Ethereum" official website in March 2026; Zcash plans to be fully post-quantum ready by the end of 2027; Ripple released the XRP Ledger quantum resistance roadmap, targeting completion by 2028; Algorand has completed Falcon signature integration on mainnet; Tron plans to launch a quantum-resistant mainnet in the third quarter of 2026. Solana is at least the fourth major blockchain to publish a formal post-quantum roadmap.