PQ Vault Preprint Sketches Quantum Safe Ethereum Custody

The short version

Researchers proposed PQ-Vault, a research vault design that tries to keep Ethereum assets safe even if quantum computers break common signatures. It mixes hash based checks with post quantum signatures and a helper proof of stake chain.

What the researchers did

H. Khodaiemehr, K. Bagheri, and C. Feng submitted PQ-Vault: Provably Quantum-Safe Asset Custody for Unmodified Ethereum as a preprint on arXiv in October 2026. preprint, not yet peer-reviewed

The design holds assets in a smart contract vault. Release relies on hash based and ML-DSA style checks aligned with NIST post quantum standards. ML-DSA is a post quantum signature family NIST picked for future use.

A quantum safe proof of stake sidechain certifies checkpoints with compact certs. The vault accepts a checkpoint quickly at first. A fraud proof can force a reveal if something looks wrong. That pattern mirrors fast accept rollups but adds quantum aware checks.

The authors target Ethereum contracts that stay unchanged on main logic. Custody logic wraps assets instead of rewriting every token contract on the network.

The repo ships code and lab scripts for replay tests. README warnings state the work is not audited for real funds. Treat it as a lab prototype, not a wallet product.

What they found

The authors argue that unchanged Ethereum contracts can still join while custody logic adds quantum aware checks. They position the work as a prototype for long horizon custody, not a production wallet today.

Lab scripts in the repo walk through checkpoint acceptance and fraud proof flows. Readers can replay those scripts to see where signatures and hashes interact. Details live in the PDF for threat models and assumptions.

The paper frames migration as a bundle. Hash paths and ML-DSA paths work together rather than as a single toggle in user settings. Treasury teams can map each path to their key ritual docs.

Why it matters for you

Treasury and custody teams already plan for post quantum migration time plans. A vault pattern that does not require rewriting every Ethereum contract could shorten talks with exchanges and custodians.

Protocol councils may want a concrete story for how quick checkpoints and fraud proofs interact with quantum safe signatures. Legal and insurance teams will still ask for audits before any mainnet pilot.

Dev teams building multi sig tools should read how the sidechain certifies state. Even research designs inform RFP language for future HSM upgrades.

What to keep in mind

This is research software without an audit. Legal and insurance teams will treat it as test stage work. Quantum threat time plans remain uncertain.

Do not deploy research vaults with real assets without an outside audit. Testnets and local forks are the right places to replay the published scripts.

NIST post quantum choices may evolve. ML-DSA settings you pick today may need migration plans tomorrow. Build policy for algorithm swaps now.

This desk brief does not discuss token prices or trading hype. Focus stays on custody design for long held treasuries.

Wallet teams should keep classic keys until auditors sign off on any PQ path. Mixed custody is harder to explain to users but safer during pilots.

Compliance leads should log which demo scripts ran in which test env. Rule makers ask for audit trails even on testnets.

Insurers may exclude not audited smart contracts from crime policies. Read policy text before you cite this paper in board slides.

Open source helpers should not fork the repo into a branded wallet without a full audit trail. Marketing ahead of review hurts the whole ecosystem.

Board slides should label this work as research, not as a shipped product. Hype slides create false comfort during key rotation talks.

Key takeaways

• Separate headline quantum fear from concrete custody design reviews.
• Treat ML-DSA and hash based paths as part of a bundle, not a single toggle.
• Do not deploy research vaults with real assets without independent audit.
• Posted October 2026 on arXiv with code aimed at replay tests, not production.
• Unchanged Ethereum contracts can join via escrow style vault logic in the design.

Photo: Alesia Kozik / Pexels

Photo: Christina Morillo / Pexels

Sources

• Primary — arXiv, PQ-Vault: Provably Quantum-Safe Asset Custody for Unmodified Ethereum (October 2026). Vault design, signature mix, and sidechain checkpoint flow.