# Signatures Related Articles

HTX News Center provides the latest articles and in-depth analysis on "Signatures", covering market trends, project updates, tech developments, and regulatory policies in the crypto industry.

Beyond Private Keys: From Wallets and L2 to Supply Chains, How to Guard the Security Perimeter of Web3?

Beyond Private Keys: Securing Web3's Expanding Attack Surface from Wallets to L2s and Supply Chains The crypto space faced a wave of security incidents in June, with over $75 million lost across 40 major attacks. These breaches highlighted risks beyond private key theft, exposing vulnerabilities across the entire user interaction chain. Wallet security was compromised not through stolen seed phrases, but via a critical flaw in the Cardano wallet SecondFi's signing implementation. This bug allowed attackers to potentially derive private keys from publicly visible signature data, emphasizing that wallet security depends on correct cryptographic implementation, ideally in open-source, auditable code. Layer-2 networks also revealed complex trust chain risks. Attacks on legacy Aztec deployments exploited inconsistencies in proof systems, showing that a valid zero-knowledge proof is only as secure as its underlying rules. Another attack on Taiko's SGX-based prover stemmed from a leaked signing key and inadequate verification checks. Furthermore, a technical glitch halted Base's block production, underscoring that L2 security encompasses network availability and reliable user exit paths as much as asset safety. Finally, the Polymarket incident demonstrated that even audited smart contracts are not immune. A compromised third-party supplier led to a malicious script being injected into the platform's frontend, resulting in user fund losses. This "supply chain attack" shows that the security of the entire interaction path—from the webpage to the wallet signature—is critical. The conclusion is clear: Web3 security now involves safeguarding the entire journey from transaction intent to on-chain settlement. Users must adopt layered security habits: isolating long-term holdings, using dedicated wallets for daily interactions, scrutinizing transaction details before signing, and managing authorizations cautiously. Defense must evolve from protecting a single point (the private key) to securing a complete chain of interactions.

marsbit07/09 10:44

Beyond Private Keys: From Wallets and L2 to Supply Chains, How to Guard the Security Perimeter of Web3?

marsbit07/09 10:44

The Real Quantum Threat to Bitcoin: 99% of People Get It Wrong

Quantum Computing's Real Threat to Bitcoin: 99% Misunderstand The article clarifies widespread misconceptions about quantum computing's threat to Bitcoin. Key points: - Bitcoin uses digital signatures, not encryption, making "collect now, decrypt later" attacks irrelevant. - Quantum computers cannot crack Bitcoin mining (requires energy exceeding the sun's output) but threaten signatures via Shor's algorithm. - Only ~6.26M BTC (30-35% of supply) are at risk due to exposed public keys (legacy P2PK, reused addresses). Modern unused addresses remain safe. - Media exaggerations (e.g., "9-minute break") misrepresent research; actual quantum attacks require non-existent hardware and are likely decades away. - Bitcoin can upgrade (BIP-360 proposes post-quantum signatures), but the community must accelerate efforts (estimated 7-year timeline). - The real urgency stems from classical cryptographic risks (e.g., mathematical breakthroughs breaking secp256k1), not just quantum threats. - Recommendations: avoid address reuse, monitor BIP-360, migrate to quantum-resistant addresses when available, and ignore sensationalized headlines. Conclusion: The threat is real but distant. Panic is unwarranted, but complacency is dangerous. Proactive engineering is essential.

marsbit04/07 10:32

The Real Quantum Threat to Bitcoin: 99% of People Get It Wrong

marsbit04/07 10:32

Ethereum Unveils Post-Quantum Security Roadmap For Institutions

Ethereum has publicly formalized its post-quantum security roadmap, targeting a critical threat to its cryptographic foundations. Presented at the Institutional Ethereum Forum, researcher Will Corcoran outlined the risks quantum computers pose to elliptic-curve cryptography, which secures validator attestations, transactions, and wallet signatures. The core challenge is not just replacing signatures but managing the trade-offs: the proposed hash-based scheme, LeanSig, is significantly larger than current BLS signatures, threatening bandwidth and decentralization if naively implemented. Ethereum's solution pairs LeanSig with a STARK-based aggregation engine called Lean Multisig to compress signature data, making it viable. With a cryptographically relevant quantum computer estimated by 2032, Ethereum is targeting key upgrades for its 2029 hard fork. The effort, involving extensive research and testing, is positioned to set a new industry standard for all proof-of-stake blockchains facing this unavoidable scaling problem.

bitcoinist03/24 16:02

Ethereum Unveils Post-Quantum Security Roadmap For Institutions

bitcoinist03/24 16:02

Blockstream Unveils Quantum-Resistant Bitcoin Signing Demo On Liquid

Blockstream Research has successfully deployed and tested a post-quantum signature verification system on the Liquid Bitcoin sidechain, marking the first use of such a scheme for real transactions on a production sidechain. The implementation uses Blockstream’s smart contract language Simplicity to create custom spending conditions, allowing users to opt into quantum-resistant protections for LBTC and other assets without altering Liquid’s base consensus rules. The system employs SHRINCS, a compact hash-based signature design developed specifically for blockchain use, featuring both a stateful mode for regular transactions and a stateless fallback for recovery. Two live transactions were executed on Liquid mainnet to demonstrate functionality. Blockstream clarified that this does not make Liquid fully quantum-resistant, as critical components like the Bitcoin peg and consensus protocol remain classically secured. The development is positioned as a proactive step toward future-proofing Bitcoin infrastructure, emphasizing that quantum computers are not yet an imminent threat but require early preparation. The team also included the Bitcoin whitepaper in transaction data as a symbolic nod to Bitcoin's cypherpunk origins.

bitcoinist03/05 04:01

Blockstream Unveils Quantum-Resistant Bitcoin Signing Demo On Liquid

bitcoinist03/05 04:01

New Bitcoin Post-Quantum Work Undercuts ‘No One Is Building’ Claims

Bitcoin core developer Matt Corallo refutes claims that no serious work is being done on post-quantum cryptography for Bitcoin, pointing to Blockstream's new proposal, OP_SHRINCSVERIFY. This opcode enables SHRINCS, a hybrid hash-based signature scheme combining stateless and stateful elements, aiming for efficient 324-byte signatures with static backups. The topic is gaining traction, with multiple sessions on quantum risks and solutions scheduled at the OPNEXT 2026 conference, featuring speakers from institutions like BlackRock and Coinbase. While SHRINCS offers significant size advantages over NIST alternatives, it remains an open research proposal with unresolved questions. The development underscores that Bitcoin's post-quantum efforts are advancing with concrete proposals, moving beyond theoretical discussion.

bitcoinist02/27 22:02

New Bitcoin Post-Quantum Work Undercuts ‘No One Is Building’ Claims

bitcoinist02/27 22:02

Aptos introduces post-quantum signatures before they’re urgently needed

Aptos is advancing a proposal to introduce post-quantum digital signatures as an optional security upgrade, addressing growing concerns that future quantum computers could eventually break current cryptographic systems. The Aptos Improvement Proposal AIP-137 would integrate the SLH-DSA (FIPS 205) signature scheme at the account level, making Aptos one of the first major blockchains to natively support quantum-resistant accounts. Existing accounts would remain unchanged, and adoption would be opt-in. This move reflects broader industry attention to quantum risks, with other networks like Solana also testing quantum-resistant solutions. While some in the crypto space, including Bitcoin pioneers, view the quantum threat as distant or overhyped, Aptos and others are taking proactive steps to prepare for a post-quantum era.

cointelegraph12/18 16:42

Aptos introduces post-quantum signatures before they’re urgently needed

cointelegraph12/18 16:42

Bitcoiners push for quantum-resistant BIP-360 upgrade as debate heats up

A group of Bitcoin advocates and fund managers is urging the network to accelerate the adoption of quantum-resistant cryptography, citing BIP-360 as a potential solution. Proponents like Charles Edwards of Capriole warn that a significant portion of Bitcoin could be vulnerable to quantum attacks within years and argue for a migration deadline by 2028. However, critics including Adam Back of Blockstream dismiss these concerns as premature, stating quantum threats are “decades away” and emphasizing that Bitcoin doesn’t rely on encryption vulnerable to near-term quantum breaks. Debate continues as Taproot adoption declines, possibly reflecting user anxiety, while alternative quantum-resistant signature schemes like hash-based proposals from Blockstream Research gain attention.

cointelegraph12/18 12:21

Bitcoiners push for quantum-resistant BIP-360 upgrade as debate heats up

cointelegraph12/18 12:21

a16z's 10,000-Word Essay (Part 1): The Misunderstood 'Quantum Supremacy', You Don't Need to Panic Until 2030

The article clarifies misconceptions about "quantum supremacy" and argues that cryptographically relevant quantum computers (CRQC) capable of breaking classical encryption (e.g., via Shor's algorithm) are unlikely to emerge before 2030. It distinguishes between post-quantum encryption and signatures, emphasizing that encryption requires immediate migration due to "Harvest Now, Decrypt Later" (HNDL) attacks, where adversaries store encrypted data for future decryption. In contrast, post-quantum signatures are less urgency, as they are not vulnerable to HNDL—past signatures remain secure even after CRQC emergence. The article critiques exaggerated claims about quantum progress, noting that current hardware lacks the scale, fidelity, and error correction needed for CRQC. It also highlights that zkSNARKs, like signatures, are not susceptible to HNDL attacks. Migration strategies should prioritize encryption while adopting a measured approach for signatures to avoid unnecessary costs and risks.

marsbit12/12 06:20

a16z's 10,000-Word Essay (Part 1): The Misunderstood 'Quantum Supremacy', You Don't Need to Panic Until 2030

marsbit12/12 06:20

From Principles to the Future: How Quantum Computing Reshapes the Security Landscape of Blockchain

Summary: This article analyzes the real quantum computing threat to blockchain, arguing timelines for cryptographically relevant quantum computers (CRQCs) are often exaggerated. While "Harvest Now, Decrypt Later" (HNDL) attacks necessitate an immediate shift to post-quantum encryption for long-term data secrecy, the transition for digital signatures is less urgent as they are not vulnerable to HNDL attacks. Most blockchains (e.g., Bitcoin, Ethereum) primarily use signatures, not encryption, so they face the threat of future signature forgery, not immediate decryption. However, Bitcoin requires urgent planning due to its slow governance, the need for active user migration of funds, and the risk of losing billions in vulnerable, possibly abandoned coins. Privacy chains with encrypted on-chain data are more immediate HNDL targets. The article cautions against a rushed adoption of immature post-quantum signatures (which are larger and riskier to implement) and zkSNARKs, advising a measured approach. It recommends immediate deployment of hybrid encryption, planning for blockchain migration, prioritizing implementation security (bugs are a bigger near-term risk than quantum computers), and maintaining perspective on quantum computing announcements.

比推12/10 09:34

From Principles to the Future: How Quantum Computing Reshapes the Security Landscape of Blockchain

比推12/10 09:34

活动图片

Project Updatesright-arrow

Trading Strategiesright-arrow