Quick answers to the questions our customers ask most often.
Is QorTrace scanning my private keys?
No. We scan public addresses only — the same data anyone with a block explorer can see. Your seed phrase, secret key, or HSM material never leaves your custody. Period.
How accurate is the Quantum Score?
The score is deterministic against a published methodology. If two analysts run the scan on the same address at the same block, they get the same score — guaranteed. You can verify by hitting /verify/<scan_id>.
How long until quantum computers break ECDSA?
NIST and the NSA both target 2030/2035 for federal systems to migrate (CNSA 2.0). Most experts estimate cryptographically relevant quantum computers (CRQCs) arrive in the 2030-2040 window. The "harvest now, decrypt later" attack is already happening — adversaries are storing onchain data today to break it tomorrow.
Why does my address show "Critical" if I've never been hacked?
Because exposure ≠ compromise. A Critical score means a future quantum attacker would be able to forge signatures from this pubkey — your funds aren't gone, they're just vulnerable. Migrating to a fresh address fixes it instantly.
Can I rescan after migrating?
Absolutely. Run a fresh scan on the new address — you should see Tier: Low. We recommend adding both old + new wallets to your Atlas portfolio so you can prove the migration to auditors later.
Do you support multisig?
We score at the threshold level — meaning if the multisig requires M of N signers, we report the highest-exposure signer's score (worst-case posture). Per-signer breakdowns are on the roadmap for v0.3.