METHODOLOGY v0.2

NOW LIVE · 18 CHAINS · REAL-TIME DATA & ANALYSIS

Quantum-Ready Audits, Security, Risk Intelligence and PQC Migration for the Global OnChain Economy

The cryptographic risk, intelligence and defense platform powering wallet scans, smart-contract audits, signed PQC certificates, treasury monitoring, and PQC migration for blockchains, DeFi, exchanges, custodians, banks, governments and the institutions holding the keys.

Scan a wallet — free See methodology

EXPOSURE READOUT · LIVE DEMO

0xd8dA…6045 · ETHEREUM

EXPOSURE

LOW

BAL AT RISK

$1K

SIGNED TX

ADDRESS TYPE

EOA

SCHEME

secp256k1

Live · last 10 scans · refreshed every 30s

polygon0x0000…1010· 33m ago

aptos0x1· 34m ago

tronTXYZop…AeBf· 34m ago

solanaGThUX1…wDsh· 34m ago

bitcoin1A1zP1…vfNa· 35m ago

ethereum0xd8dA…6045· 35m ago

ethereum0x0000…05Fa· 8h ago

base0x4200…0010· 21h ago

solana5Q544f…e4j1· 21h ago

solana9WzDXw…AWWM· 21h ago

polygon0x0000…1010· 33m ago

aptos0x1· 34m ago

tronTXYZop…AeBf· 34m ago

solanaGThUX1…wDsh· 34m ago

bitcoin1A1zP1…vfNa· 35m ago

ethereum0xd8dA…6045· 35m ago

ethereum0x0000…05Fa· 8h ago

base0x4200…0010· 21h ago

solana5Q544f…e4j1· 21h ago

solana9WzDXw…AWWM· 21h ago

↓ CLICK ANY SUPPORTED CHAIN BELOW FOR A QUICK SCAN

FREE PREVIEW · NO CARD · 30 SECONDS

Run a free post-quantum scan on any wallet you own.

Create a free account, paste an address from any of 18 chains, and get a deterministic exposure score with basic findings emailed to you. Watermark-free deep-dive reports live on the paid plans.

Run free scan See plans

WHY THIS MATTERS · THREAT INTELLIGENCE

The cryptographic clock is already ticking.

NIST finalized FIPS 203/204/205 in August 2024. Harvest-now-decrypt-later is documented adversary behavior. Every chain we cover relies on signatures Shor's algorithm breaks.

◆ THREAT VECTOR · 01

$400B+

in BTC sits in addresses with revealed public keys — fully exposed to a quantum adversary today.

◆ THREAT VECTOR · 02

100%

of Solana addresses are quantum-exposed by design. The address IS the public key. No hash protection.

◆ THREAT VECTOR · 03

ECDSA · EdDSA · Schnorr · BLS

every signature scheme used across the top 18 chains is broken by Shor's algorithm under a CRQC.

PUBLIC DATA · PQC RISK INDEX

The state of post-quantum risk, measured live.

Aggregated, deterministic scoring across every QorTrace scan. Updates every 60 seconds — methodology qortrace-method-v0.1.

TOTAL SCANS

466

across 7 chains

UNIQUE ADDRESSES

in the last 30 days

AVG PQC EXPOSURE

45.1

0 = safe · 100 = critical · 64.2% pubkey exposed

CRITICAL + HIGH

62.9%

of scanned addresses

TIER DISTRIBUTION

LIVE

CRITICAL21.5%(100)

HIGH41.4%(193)

MODERATE1.3%(6)

LOW35.8%(167)

Scan your address How we score

QELLI · ADVANCED AI

Meet Qelli — A Truly Native AI for PQC.

Qelli is QorTrace's Advanced AI assistant — trained on every QorTrace doc, every methodology version, and post-quantum cryptography as a domain. She'll walk you through pricing, scope audits, and answer compliance questions in seconds — with sources.

Free with any QorTrace account, including the free tier.

Create free account LEARN MORE

QELLI · LIVE PREVIEW

How does the QorTrace Score get computed?

QELLI

Score = 100 − tier_penalty − history_penalty, clamped 0..100. A Critical-tier address (exposed pubkey + non-zero balance) starts with a 60-point penalty before history rolls in. Sources: methodology/how-the-score-is-computed.

QELLI ALWAYS CITES SOURCES

Walks you through pricing + plan choice
Pre-flight checklists before submitting an audit
Cites every doc she pulls from — no hallucinations
Speaks PQC fluently — HNDL, FIPS 203/204/205, CNSA 2.0

LIVE FROM QELLI · NEWS RADARSEE ALL RSS

DARK READING

Name That Toon Contest

COINTELEGRAPH

XRP transaction demand falls 91.5% as traders focus on $0.65 support

FINEXTRA

FSB guides banks on resposible adoption of AI

ORGS PUBLISHING THEIR PQC THREAT RADAR

5+ orgs publish their PQC threat radar via QorTrace

Each domain hosts /.well-known/qortrace.json pointing to their public radar — auto-discovered, no manual logo upload.

TOP 10 THREAT RADARS · LAST 7 DAYS

Most-shared PQC threat radars this week

Ranked by combined share-clicks and pageviews. Updated live. Want your radar here next week? Publish your radar — free

WHAT CUSTOMERS ARE SAYING

Built for the teams already shipping post-quantum.

These are the security, engineering, and crypto leads publishing their own verified threat radars on QorTrace right now.

AUTO-ROTATING · 3/5

We've been quietly tracking PQ risks for years. QorTrace is the first product that makes the work visible to our community without leaking sensitive infra.

Hayden A.

CTO · Liminal Forge

FEATURED

Our governance forum demanded a clear post-quantum posture. QorTrace's threat radar gave us the credible artefact to publish — and the receipts to back it up.

Stani K.

Founder · Ardent Vault

FEATURED

QorTrace gave us a single pane for tracking quantum-relevant threats across our oracle stack. The weekly digest is now required reading for our security guild.

James M.

Head of Protocol Security · Helix Mesh Labs

FEATURED

NEW · SMART CONTRACT AUDITS · 18 CHAINS

Audit your contract in 30 seconds. Free.

Paste Solidity, Move, Rust, Cairo or Vyper — the same engine that powers our paid audits returns severity-tiered findings, code excerpts, and remediation in under a minute. No signup required. Save to your account for a public certificate you can embed anywhere.

Try a free preview See how it works

REAL FINDINGS

Reentrancy, access-control, integer safety, oracle manipulation.

SCORED 0–100

Security + Trust scores, identical to our paid audit path.

SHAREABLE CERTIFICATE

Save your preview → get SVG / PNG / HTML for README & docs.

THE QORTRACE STACK

Scan. Analyze. Certify. Monitor.

Four surfaces, one cryptographic risk model. Check a single wallet, audit a Solidity contract, ship a signed certificate buyers actually trust, and monitor an entire treasury — every chain, every signature scheme, every quantum-relevant primitive. The same NIST-aligned methodology powers all four.

QORTRACE SCAN

Wallet Quantum Exposure

Paste any address across 18 chains. Deterministic 0–100 exposure score, factor breakdown, and migration playbook in seconds. Free and unauthenticated.

Run a free scan

QORTRACE CONTRACT

Smart Contract PQC Audit

Static analysis for Solidity. Catches ecrecover, EIP-712, permit, BLS pairings, hardcoded signers — every PQC migration surface, line-numbered.

Analyze a contract

QORTRACE AUDIT

Full Audits + Signed Certificates

Standard (AI-narrated, <90s) or Deep Dive (senior auditor reviewed). Severity-tiered findings, Security + Trust Scores, branded shareable cert.

Get audited

QORTRACE ATLAS

Treasury Exposure Dashboard

Aggregate balance-at-risk, exposed-address counts, and contract finding heatmaps across your entire on-chain surface — with webhooks and CSV import.

Open Atlas

HOW IT WORKS

Three steps, one auditable trail.

STEP 01

Identify

Select a chain. Paste a wallet, contract, or fetch by address. Live on-chain data is pulled and normalized.

STEP 02

Score

Deterministic, evidence-grounded methodology — every point traceable to NIST-aligned cryptographic facts.

STEP 03

Migrate

Plain-English risk narrative + a versioned migration playbook tailored to the asset profile.

USE CASES

Built for who custodies the risk.

Same engine, three lenses. Pick the persona that matches how you hold cryptographic risk.

THE QUESTION

Is my wallet quantum-vulnerable today, and what should I do about it?

HOW QORTRACE ANSWERS

01Paste a wallet address — no signup, no signature required.
02Get a 0–100 exposure score within 4 seconds.
03Receive a plain-English migration playbook tailored to your chain.

Scan a wallet free

4smedian scan time

OPEN · AUDITABLE · VERSIONED

Read the recipe. Verify the posture.

The QorTrace methodology is versioned and open. Our compliance posture is live and continuously attested.

~/qortrace · methodology

$ cat methodology.json

{
  "name":     "QorTrace Method",
  "version":  "v0.1",
  "auditable": true,
  "factors": [
    { "id": "wallet_format",       "weight": 18 },
    { "id": "signature_scheme",    "weight": 24 },
    { "id": "key_rotation",        "weight": 16 },
    { "id": "contract_primitives", "weight": 26 },
    { "id": "operational_hygiene", "weight": 16 }
  ],
  "stamps":   ["NIST FIPS 203", "FIPS 204", "FIPS 205"],
  "doc_count": 39
}

$ ls docs/ | wc -l 39

Read the methodology

CERTIFICATE OF POSTURE

Compliance, in the open.

Live posture across SOC 2, ISO 27001, NIST CSF 2.0, DORA, and FFIEC, plus every published policy.

STD	SOC 2 · ISO 27001 · NIST CSF 2.0
PQC	FIPS 203 · 204 · 205
UPTIME	99.97% · last 90 days
LICENSE	Methodology · open · versioned

View Trust Center