Stablecoin issuer Circle has published a detailed post-quantum security roadmap for Arc, its upcoming layer-1 blockchain, covering every layer of the network from user wallets down to validator infrastructure, and it is doing so before any competitor or regulator has forced the move.
The announcement, made on April 2, 2026, comes just days after Google’s Quantum AI team dropped a bombshell whitepaper warning that functional quantum computers could arrive sooner than expected and could be powerful enough to crack Bitcoin’s cryptography in roughly nine minutes.
Why Circle moved first
The timing is deliberate. Circle is not reacting to a crisis, it is trying to avoid one. For months, research from institutions including Google and the California Institute of Technology has been narrowing the timeline to what the crypto industry calls ‘Q-Day’: the moment a sufficiently powerful quantum computer can break the public-key cryptography that secures wallets, authorizes transactions, and authenticates network participants.
Google’s March 31 whitepaper sharpened that fear considerably. Researchers showed that breaking the 256-bit elliptic curve cryptography underlying most blockchains could require fewer computational resources than previously estimated, potentially as few as 500,000 physical qubits. That finding sent quantum-resistant tokens surging, with QRL jumping more than 50% and Cellframe gaining 40% within 24 hours.
Your completely free resource hub designed to boost your knowledge of cryptocurrencies
Circle Research has argued for some time that blockchains need to be prepared across every layer of the stack, not just at the wallet level. Its team also flagged the NIST-identified threat of ‘harvest now, decrypt later’ attacks, where adversaries collect encrypted data today with the intention of decrypting it once quantum capabilities mature. For long-lived institutional assets, that risk is live right now, not years away.
What the Arc roadmap actually covers
Arc’s post-quantum plan is structured in four sequential phases, each targeting a different layer of the network’s security architecture.
At mainnet launch, expected in 2026, Arc will introduce a post-quantum signature scheme for wallets. This gives users a practical path to create quantum-resistant wallets from day one. Crucially, the feature is opt-in. Circle has not forced a migration or planned any network-wide reset. The goal is a forward-compatible system that lets the ecosystem mature over time without disruption.
Shortly after mainnet, Circle plans to extend quantum resilience to private state. This means the balances, transaction flows, and recipient data processed through Arc’s opt-in privacy features will be protected by post-quantum cryptography from the outset, not retrofitted later.
The third phase targets the surrounding infrastructure: access controls, cloud environments, hardware security modules (HSMs), and the operational cryptography used across Arc’s full stack. Circle notes that protocols like TLS 1.3 already support post-quantum algorithms, and major cloud providers are quietly migrating. Arc’s infrastructure roadmap is being aligned with those broader industry transitions.
Validator hardening comes last. Arc’s current consensus architecture finalizes blocks in under one second, which means an attacker would have a window of roughly 500 milliseconds to forge a validator signature before finality. Circle’s assessment is that this makes the validator attack path highly improbable even in a post-quantum scenario. Still, the roadmap targets validator signature upgrades once rigorous performance testing and tooling support are in place, because post-quantum signatures are larger and more computationally intensive to verify.
A critic’s warning addressed
Before Circle published this roadmap, an analyst at Quantum Canary had already flagged the gap. In an October 2025 commentary, the firm warned that Arc’s EVM-compatible design relied on elliptic-curve cryptography signatures and that, without a published PQC commitment, the ‘harvest now, decrypt later’ threat was an unaddressed blind spot. The critique called on Circle to publish a dated post-quantum roadmap and a testnet plan that exercised quantum-resistant signatures under production-grade load.
Circle’s April 2 roadmap directly answers the substance of that challenge. A specific phased delivery schedule for each layer has not yet been published, but the sequencing logic, technical rationale, and design choices are now on the record.
How Arc compares across the industry
Arc is not the only blockchain preparing for quantum threats, but it is among the few designing for them before launch rather than retrofitting them afterward. Google’s research noted that Algorand is currently the most quantum-ready blockchain in production. Ethereum and Solana are actively exploring post-quantum migration paths, with Ethereum’s roadmap targeting XMSS multi-signatures and the Poseidon2 hash function at the validator layer.
Bitcoin’s community remains more divided. Blockstream CEO Adam Back has publicly argued that quantum risks are overstated and that no action is needed for decades. On the other side, security researcher Ethan Heilman and co-authors have proposed BIP-360, a Bitcoin Improvement Proposal that would introduce quantum-resistant wallet formats, but Heilman estimates that implementation could take as long as seven years to complete.
StarkWare co-founder Eli Ben-Sasson offered a sharper take after the Google paper landed: ‘Saying that quantum computers are coming is not FUD. FUD is claiming Bitcoin can’t adapt. It can adapt. Just need to start working on these solutions today.’ Circle appears to agree, and has chosen to act rather than debate.
What it means for builders and institutions
For developers building on Arc, the roadmap provides a concrete migration path rather than a vague future commitment. Arc is EVM-compatible and preserves familiar developer tooling, which means post-quantum adoption can happen without rebuilding applications from scratch. Circle’s infrastructure already supports programmatic wallet creation, transaction execution, and signing, so when post-quantum signatures roll out, the ecosystem can move together.
For enterprises, banks, fintechs, and asset issuers, the institutions Circle built Arc to serve, the roadmap addresses a baseline requirement they cannot defer indefinitely. Long-lived assets, cross-border payment flows, and regulated financial infrastructure all depend on cryptographic durability that must match asset lifespan. Building that durability in from the start, rather than layering it on after Q-Day becomes undeniable, is the core argument Circle is making.
The broader crypto market is already paying attention. Whether the post-quantum migration window is 3 years away or 10, the institutions moving now are the ones that will not be scrambling later.
