Bitcoin
- ExposedTaproot, and any address that has spent once.
- ShieldedAn address that has only ever received.
Quantum risk checker
Have you been qwned?
Paste any Bitcoin, Ethereum or Solana address. We read public chain data and tell you whether the key protecting it is already exposed.
Bitcoin
Ethereum and EVM
Solana
Quantum risk scanner
Chain detected automatically
Public chain data only. No keys, no wallet connection, no address stored.
The quantum deadline
Q-Day is when public keys stop being safe to publish
A large enough quantum computer can derive a private key from the matching public key. Most chains publish that public key the moment an address spends. Nothing has to be intercepted, because the exposed keys are already public and stay that way.
| 6.04M BTC | 30.2% of supply, roughly $469B, with public keys already visible | Glassnode, 2026 |
| 50–65% | Of all Ether, held in accounts whose key is recoverable | Gershteyn and Alber, 2026 |
| <1M qubits | Google's 2025 estimate to break RSA-2048, down from 20M in 2019 | Gidney, Google Quantum AI |
| ~1 in 2 | Expert odds on a capable quantum computer by 2035 | Global Risk Institute, 2025 |
The June 2026 executive order, EO 14413, puts federal deadlines on quantum readiness, and the machines it prepares for are the same ones that break today's encryption.
What EO 14413 requiresThis measures exposure rather than imminent theft. CoinShares argues the practically exploitable set is far smaller.
Full methodology and sources
Quantum doomsday clock
Estimated time until quantum computers can break the encryption securing today's digital assets.
—Days
—Hrs
—Min
—Sec
How it works
Each chain publishes its keys at a different moment
Ethereum and EVM
- ExposedAny account that has sent a transaction.
- ShieldedAn account that has only received.
Solana
- ExposedEvery funded account. The address is the key.
- SeparateToken accounts hold no key at all.
What to do next
Exposure cannot be undone, but funds can be moved
Quip Network wraps wallets you already use with quantum-resistant protection across Bitcoin, EVM chains and Solana, using a firewall contract and a cosigner that requires both a classical and a quantum-resistant signature.
Before you move anything
- 01Generate an address that has never sent a transaction.
- 02Move the balance in one transaction, not several.
- 03Do not send funds back to the old address.
- 04Protect the new address before it needs to spend.
Questions
All questions answered
Do you store the addresses people check
No. The cache and rate limiter key on an HMAC of the input, so nothing in the system can be read back as a list of addresses. Scoring runs in your browser, and the server reads public chain data the way a block explorer does.
Does this need my seed phrase or a wallet connection
No. Everything here comes from data that is already public, and reading it needs nothing from you beyond the address itself.
Why does my Solana wallet always come back exposed
A Solana address is itself an ed25519 public key. Bitcoin and Ethereum put a hash in front of the key, which shields it until the address spends. Solana does not, so exposure there is a property of the account model. What you can still control is how much sits behind any one key.
My cold wallet says shielded. Is it safe
It means only a hash of the key is on-chain today, which is the better position to be in. That stops being true the moment the address broadcasts a spend, because the signature publishes the key. Treat a shielded result as a reason to plan the move carefully rather than as a settled state.