QorTrace
QORTRACE THREAT RADAR · LIVE

The clock is
already ticking.

A live map of post-quantum and Web3 threats. Every signature you commit today is harvest-now-decrypt-later candy when fault-tolerant quantum arrives. Watch the threat surface — and the countdown — in real time.

Schedule Consult
ESTIMATED Q-DAY · 2028-10-03
712
DAYS
3
HRS
43
MIN
26
SEC
STATE OF THE ART
1,180
physical qubits
Atom Computing · Phoenix
Best logical: 24 q (Microsoft + Quantinuum)
HARVEST · NOW · DECRYPT · LATER
6,854,202,600
ECDSA signatures committed onchain (BTC + ETH)
BTC #972542 · ETH #26,243,865
SEE EXPOSED WALLETS →
WEEKLY THREAT BRIEFING · FREE
Tweet this view · DE
FILTERS · TAP TO TOGGLE LAYERS
NEWS_DECRYPTKen Griffin Says AI Is 'Almost Certainly' in a Bubble—And Compares GPUs to Airline SeatsNEWS_THEDEFIANTeMudhra's Weak Certificate Keys Prompt Emergency Trust UpdatesNEWS_DARKREADINGTiDB Breach Exposes Flawed Cloud Security AssumptionsNEWS_THEDEFIANTMatter Labs Debuts Prividium Commander For InstitutionsNEWS_BITCOINMAGThree Companies Have Notified the SEC of Intention To Start Tokenized Stocks TradingNEWS_THEDEFIANTMastercard Opens AI Machine-Payment Pilot to DevelopersNEWS_THEDEFIANTVantage and Rio Bank Use Tokenized Deposits for Loan Payment on EthereumNEWS_THEDEFIANTYuga Labs Launches Mudwater Trading-Card NFTs on SolanaNEWS_THEDEFIANTTrump Touts Crypto Scam Crackdown as DOJ Reports $938 Million RestrainedNEWS_COINTELEGRAPHTether backs Bolivian fintech bringing USDT payments to food delivery and bankingNEWS_THERECORDMeta on the spot for $25 billion under New Mexico privacy rulingNEWS_COINTELEGRAPHTrump didn‘t mention ‘crypto’ once in White House cybercrime roundtableNEWS_DECRYPTNvidia Unveils Its Full-Stack Blueprint to Contain and Monitor AI AgentsNEWS_DARKREADINGMarvell, Microsoft & Oracle Work to Standardize Data Center Hardware SecurityNEWS_COINTELEGRAPHHere’s what happened in crypto todayNEWS_DARKREADINGCloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
FREE PQC SCAN · 1 PER DAY

Paste a wallet or contract address and we'll score its cryptographic exposure on a 0-100 scale. Free, no card, instant.

REGIONAL HOTSPOTS · 14d
NIST PQC STANDARDS
ML-KEM (Kyber)
FIPS 203 · Key Encapsulation
STANDARDISED
2024
ML-DSA (Dilithium)
FIPS 204 · Digital Signature
STANDARDISED
2024
SLH-DSA (SPHINCS+)
FIPS 205 · Hash-based Signature
STANDARDISED
2024
FN-DSA (Falcon)
FIPS 206 · Digital Signature
DRAFT (DIS)
2025
HQC
— · Backup KEM
SELECTED (2025)
2025
THREAT FEED · LAST 14 DAYS
1456
news
317
cve
25
kev
Sources: CISA Known Exploited Vulnerabilities catalog, NIST NVD CVE feed, GitHub Advisory Database, and curated cybersecurity + Web3 RSS feeds. Refreshed hourly.
MOST-TARGETED VENDORS · 30d
ibm
CVE 105 · GHSA 0
105
wordpress
KEV 1 · CVE 48 · GHSA 0
49
java
CVE 24 · GHSA 0
24
mysql
CVE 14 · GHSA 0
14
cisco
KEV 2 · CVE 12 · GHSA 0
14
python
CVE 13 · GHSA 0
13
redhat
CVE 12 · GHSA 0
12
google
CVE 10 · GHSA 0
10
QUANTUM RACE · LEADERBOARD
IBM
Condor
1,121q
Atom Computing◉ SOTA
Phoenix
1,180q
USTC
Zuchongzhi 3.0
504q
Quantinuum
H2
56q
Google
Willow
105q
Microsoft + Quantinuum
Topological + ion-trap
56q
IonQ
Forte
64q
Rigetti
Ankaa-3
84q
PQC COMPLIANCE COUNTDOWN
DORA · Digital Operational Resilience Act
642d ago
2025-01-17 · EU
EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.
CNSA 2.0 · Software/Firmware
294d ago
2025-12-31 · US-NSA
NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.
BSI TR-02102-1 · Crypto Recommendation Refresh
113d ago
2026-06-30 · DE-BSI
Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.
CNSA 2.0 · Networking & VPN
436d
2027-12-31 · US-NSA
Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.
NIST SP 800-131A · Disallow RSA-2048 / ECDSA P-256
1532d
2030-12-31 · US-NIST
NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.
CNSA 2.0 · Full PQC Adoption
2628d
2033-12-31 · US-NSA
All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.
COMMUNITY PULSE · CURATED
@CISAgov
Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.
@NIST
FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.
@matthew_d_green
Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.
@hashedout
Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.
@SchneierBlog
If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.
@a16zcrypto
Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.
LATEST ADVISORIES
NEWS_DECRYPT · INFO
Ken Griffin Says AI Is 'Almost Certainly' in a Bubble—And Compares GPUs to Airline Seats
Citadel's founder says investors are almost certainly in an AI bubble, warns a chip glut could crash prices like empty airline seats, yet expects the survivors to lead for decades.
NEWS_THEDEFIANT · INFO
eMudhra's Weak Certificate Keys Prompt Emergency Trust Updates
One recovered private key was just 4. The company says the flaw went undetected through two independent audit cycles.
NEWS_DARKREADING · INFO
TiDB Breach Exposes Flawed Cloud Security Assumptions
Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.
NEWS_THEDEFIANT · INFO
Matter Labs Debuts Prividium Commander For Institutions
The control plane for bank digital-asset operations is generally available at launch. Its revenue goes to Matter Labs, not ZKsync tokenholders, CEO Alex Gluchowski told The Defiant.
NEWS_BITCOINMAG · INFO
Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading
Bitcoin Magazine Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks Trading The Securities and Exchange Commission is taking applications from companies wanting to list tokenized stocks. This post Three Companies Have Notified the SEC of Intention To Start Tokenized Stocks
NEWS_THEDEFIANT · INFO
Mastercard Opens AI Machine-Payment Pilot to Developers
Buyer- and seller-side APIs, a toolkit and a sandbox extend developer testing, while Agent Pay for Machines remains a noncommercial pilot.
NEWS_THEDEFIANT · INFO
Vantage and Rio Bank Use Tokenized Deposits for Loan Payment on Ethereum
Participate says principal and interest reached the receiving bank’s wallet in under three minutes, with loan balances and notices updated alongside the payment.
NEWS_THEDEFIANT · INFO
Yuga Labs Launches Mudwater Trading-Card NFTs on Solana
Each Bored Ape qualifies for 10 packs and each Mutant Ape for two, while OpenSea reports 78.3 ETH in pack trading volume.
NEWS_THEDEFIANT · INFO
Trump Touts Crypto Scam Crackdown as DOJ Reports $938 Million Restrained
Attorney General Todd Blanche described a nationwide scam prosecution initiative deploying dozens of prosecutors across all 94 US Attorneys’ Offices.
NEWS_COINTELEGRAPH · INFO
Tether backs Bolivian fintech bringing USDT payments to food delivery and banking
The investment will support Peso’s expansion across four Latin American markets, where it connects stablecoin payments to merchant services and local banking networks.
NEWS_THERECORD · INFO
Meta on the spot for $25 billion under New Mexico privacy ruling
The Cambridge Analytica data privacy scandal from a decade ago is still weighing on Meta's finances.
NEWS_COINTELEGRAPH · INFO
Trump didn‘t mention ‘crypto’ once in White House cybercrime roundtable
The US President detailed many schemes defrauding Americans, but referred only to “cybercurrency“ related to scams.
NEWS_DECRYPT · INFO
Nvidia Unveils Its Full-Stack Blueprint to Contain and Monitor AI Agents
Nvidia's OpenShell Reference Architecture pairs a software sandbox on Vera CPUs with Sentry monitoring on BlueField-4 chips, aiming to let companies run autonomous agents while enforcing limits agents cannot reach.
NEWS_DARKREADING · INFO
Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security
The effort is aimed at standardizing a NIST FIPS 140-3 Level 3 integrated HSM for cloud and hyperscale data center infrastructure.
NEWS_COINTELEGRAPH · INFO
Here’s what happened in crypto today
Need to know what happened in crypto today? Here is the latest news on daily trends and events impacting Bitcoin price, blockchain, DeFi, Web3 and crypto regulation.
NEWS_DARKREADING · INFO
Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens
Research finds that, among respondents experiencing data loss, only 16% said DLP blocked their most significant incidents before data left the organization.
NEWS_THEDEFIANT · INFO
Dolomite Adds $100 Million in Concrete’s Bitcoin-Backed Collateral
Concrete can borrow against Bitcoin held at BitGo, but liquidations require offchain custody settlement rather than an instant onchain sale.
NEWS_THEDEFIANT · INFO
13 JPMD Lookalikes Emerge Amid JPMorgan’s Ethereum Launch
The bank’s genuine Ethereum token showed zero supply and holders, while its documentation warns that same-name tokens at other addresses are unaffiliated.
NEWS_THEDEFIANT · INFO
Krak vs. PayPal vs. Cash App: Fees, Reach and Bank Withdrawals
Cash App requires US residency, while Krak and PayPal support US-to-UK personal payments. Conversion and bank withdrawal terms determine the cost beyond the in-app transfer.
NEWS_THEDEFIANT · INFO
Polymarket US vs. Kalshi: What a 100-Contract Trade Costs
A hypothetical buy at 40 cents and sale at 60 cents produces nearly identical taker profits. Resting orders and funding methods can change the comparison.
NEWS_THERECORD · INFO
Tech trio launches $10 million initiative to help under-resourced utilities bolster cybersecurity
Up to 500 under-resourced utilities will receive support in order to bolster their cybersecurity through a private sector initiative launched this week.
NEWS_DARKREADING · INFO
'PHP2Shell' Bugs Signal Red Alert for Security Industry
Security teams are scrambling to remediate two critical PHP vulnerabilities following leaked details and reports of exploitation attempts.
NEWS_THEHACKERNEWS · INFO
Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update co
NEWS_PROTOS · INFO
Crypto PACs spend big on Ohio Senate race
Crypto-associated PACs like Defend American Jobs and Digital Freedom Fund have deployed millions in the Ohio Senate race. The post Crypto PACs spend big on Ohio Senate race appeared first on Protos .
NEWS_DECRYPT · INFO
Who Found the PHP Bug That Made Governments Unplug Their Websites? ChatGPT, Of Course
OpenAI says its models found PHP2Shell and led a two-month coalition to fix it. It's the same AI that broke into Hugging Face and an Australian government portal this year.
NEWS_THERECORD · INFO
Democrat lawmakers say Russia is aiming to undermine party ahead of midterms
The pair stressed the latest update showed no country is pursuing the technically challenging effort to interfere with or hack into the country’s election infrastructure or tamper directly with votes.
NEWS_DECRYPT · INFO
How a SpaceX and Tesla Merger Would Reshape Musk’s AI Empire
Both boards are now studying a tie-up that would put Grok, X, Starlink, orbital data centers, a chip megafactory and Optimus robots under one roof—and under one man's control.
NEWS_THEHACKERNEWS · INFO
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
The popular LiteLLM Python package has been compromised as part of a software supply chain attack that delivered a credential stealer and a backdoor, according to reports from SafeDep, Socket, StepSecurity, and Upwind. The compromise affects LiteLLM 1.107.0, distributed through PyPI wheels and Docke
NEWS_COINTELEGRAPH · INFO
Cardano Foundation urges EU against expanding MiCA rules to DeFi and staking
The foundation called for regulation based on financial risks rather than technology, warning that overlapping rules could create uncertainty for crypto businesses across the EU.
NEWS_PROTOS · INFO
Remotely exploitable PHP bug found on 70% of world’s websites
PHP is trying to patch two remotely exploitable bugs that AI found hiding in the language behind up to 70% of the world’s websites. The post Remotely exploitable PHP bug found on 70% of world’s websites appeared first on Protos .

Don't wait for Q-Day.

QorTrace audits smart contracts, scans wallets for cryptographic exposure, and certifies post-quantum readiness. The strongest hands move first.

Get auditedSee pricing
GET STARTED IN 60s
Need to scope a PQC audit, scan a wallet, or pick a tier? I'll walk you through it in under a minute — with sources.