QorTrace
QORTRACE THREAT RADAR · LIVE

The clock is
already ticking.

A live map of post-quantum and Web3 threats. Every signature you commit today is harvest-now-decrypt-later candy when fault-tolerant quantum arrives. Watch the threat surface — and the countdown — in real time.

Schedule Consult
ESTIMATED Q-DAY · 2028-10-03
707
DAYS
23
HRS
11
MIN
56
SEC
STATE OF THE ART
1,180
physical qubits
Atom Computing · Phoenix
Best logical: 24 q (Microsoft + Quantinuum)
HARVEST · NOW · DECRYPT · LATER
6,860,586,600
ECDSA signatures committed onchain (BTC + ETH)
BTC #973167 · ETH #26,273,925
SEE EXPOSED WALLETS →
WEEKLY THREAT BRIEFING · FREE
Tweet this view · RU
FILTERS · TAP TO TOGGLE LAYERS
NEWS_COINTELEGRAPHStandard Chartered-led Anchorpoint says it’s not rushing retail stablecoinNEWS_COINTELEGRAPHAI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s DigestNEWS_THEHACKERNEWSUnpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other ServersNEWS_THEHACKERNEWSPHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted HackingNEWS_THEDEFIANTHow a DAO Vote Becomes a Treasury TransferNEWS_THEDEFIANTHow to Check a Software Wallet—and What the Checks Cannot ProveNEWS_DECRYPTWells Fargo, Cisco, Intuit Among 6 More Companies Objecting to Tokenized StocksNEWS_COINTELEGRAPHECB official sees digital euro as key to protecting EU ‘sovereignty’NEWS_COINDESKLatvia targets tokenization rules in 2027 with commercial property in focusNEWS_DECRYPTBitcoin ETFs Snap Two-Week Losing Streak Despite Late-Week SlideNEWS_THEDEFIANTWhy Tokenized Stocks Can Trade Away From the Share PriceNEWS_THEDEFIANTTokenized Deposits vs. Stablecoins: What JPM Coin and USDC Holders OwnNEWS_COINDESKUK banks face 10,000 complaints in 3 months over crypto restrictionsNEWS_COINTELEGRAPHNetanyahu floats use of blockchain as solution to potential financial sanctionsNEWS_THEDEFIANTDogecoin Foundation and House of Doge End Exclusive Brand DealNEWS_SECURITYWEEKFormer Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
FREE PQC SCAN · 1 PER DAY

Paste a wallet or contract address and we'll score its cryptographic exposure on a 0-100 scale. Free, no card, instant.

REGIONAL HOTSPOTS · 14d
NIST PQC STANDARDS
ML-KEM (Kyber)
FIPS 203 · Key Encapsulation
STANDARDISED
2024
ML-DSA (Dilithium)
FIPS 204 · Digital Signature
STANDARDISED
2024
SLH-DSA (SPHINCS+)
FIPS 205 · Hash-based Signature
STANDARDISED
2024
FN-DSA (Falcon)
FIPS 206 · Digital Signature
DRAFT (DIS)
2025
HQC
— · Backup KEM
SELECTED (2025)
2025
THREAT FEED · LAST 14 DAYS
1446
news
23
kev
230
cve
Sources: CISA Known Exploited Vulnerabilities catalog, NIST NVD CVE feed, GitHub Advisory Database, and curated cybersecurity + Web3 RSS feeds. Refreshed hourly.
MOST-TARGETED VENDORS · 30d
ibm
CVE 78 · GHSA 0
78
oracle
CVE 49 · GHSA 0
49
wordpress
CVE 34 · GHSA 0
34
java
CVE 14 · GHSA 0
14
cisco
KEV 2 · CVE 12 · GHSA 0
14
mysql
CVE 14 · GHSA 0
14
python
CVE 13 · GHSA 0
13
google
CVE 9 · GHSA 0
9
QUANTUM RACE · LEADERBOARD
IBM
Condor
1,121q
Atom Computing◉ SOTA
Phoenix
1,180q
USTC
Zuchongzhi 3.0
504q
Quantinuum
H2
56q
Google
Willow
105q
Microsoft + Quantinuum
Topological + ion-trap
56q
IonQ
Forte
64q
Rigetti
Ankaa-3
84q
PQC COMPLIANCE COUNTDOWN
DORA · Digital Operational Resilience Act
647d ago
2025-01-17 · EU
EU financial-sector firms must demonstrate operational resilience (incl. ICT third-party risk) — including cryptographic posture.
CNSA 2.0 · Software/Firmware
299d ago
2025-12-31 · US-NSA
NSA target for new National Security Systems software & firmware to start adopting CNSA 2.0 (Kyber, Dilithium, SHA-2) algorithms.
BSI TR-02102-1 · Crypto Recommendation Refresh
118d ago
2026-06-30 · DE-BSI
Annual BSI cryptographic-recommendation refresh — flagged deadline for hybrid (classical + PQC) roll-out in regulated DE.
CNSA 2.0 · Networking & VPN
431d
2027-12-31 · US-NSA
Networking, VPN, and key-management products on NSS networks should fully support CNSA 2.0 algorithms.
NIST SP 800-131A · Disallow RSA-2048 / ECDSA P-256
1527d
2030-12-31 · US-NIST
NIST recommended sunset for classical public-key crypto in federal systems — full PQC migration target.
CNSA 2.0 · Full PQC Adoption
2623d
2033-12-31 · US-NSA
All NSS systems must be using CNSA 2.0 PQC algorithms exclusively.
COMMUNITY PULSE · CURATED
@CISAgov
Reminder: NSA's CNSA 2.0 timeline is in effect. New software for NSS should now be adopting Kyber, Dilithium, and SHA-2.
@NIST
FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA) are now the standards. Migration windows are short for high-value targets.
@matthew_d_green
Harvest-now-decrypt-later isn't a scenario, it's an active intelligence program. The ECDSA signatures you commit today are tomorrow's plaintext.
@hashedout
Bitcoin's quantum exposure isn't a 2040 problem. ~25% of circulating supply sits in P2PKH addresses with exposed pubkeys. Q-Day day-one targets.
@SchneierBlog
If your security architecture cannot survive the public release of CRYSTALS-Kyber breaks, you needed PQC yesterday.
@a16zcrypto
Wallet providers shipping PQC migration paths in 2026 will own the institutional custody narrative for the next decade.
LATEST ADVISORIES
NEWS_COINTELEGRAPH · INFO
Standard Chartered-led Anchorpoint says it’s not rushing retail stablecoin
The Standard Chartered and Animoca Brands joint venture previously targeted retail access as early as the end of 2026, but its CEO declined to reaffirm that timeline.
NEWS_COINTELEGRAPH · INFO
AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest
Similar to the Hugging Face hack, Ethereum researchers have set up an AI Agent message board to help rescue the Glamsterdam fork. ‘Steal My Bitcoin’ site successfully hacked.
NEWS_THEHACKERNEWS · INFO
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls on
NEWS_THEHACKERNEWS · INFO
PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
Threat actors have been observed using agentic artificial intelligence (AI) platforms for post-exploitation activity following the abuse of the PHP2Shell vulnerabilities tracked as CVE-2026-109618 and CVE-2026-109619. "In one case, the attackers targeted a government entity in Europe and within two
NEWS_THEDEFIANT · INFO
How a DAO Vote Becomes a Treasury Transfer
Uniswap’s executed funding proposal shows the difference between a sentiment poll, a binding vote and the contract authorized to release tokens.
NEWS_THEDEFIANT · INFO
How to Check a Software Wallet—and What the Checks Cannot Prove
Fake Firefox extensions targeted recovery phrases; Electrum patched a genuine-client flaw that could trick users into signing a substituted payment.
NEWS_DECRYPT · INFO
Wells Fargo, Cisco, Intuit Among 6 More Companies Objecting to Tokenized Stocks
Twenty-two companies have now objected to having their shares traded on the planned OKX-ICE tokenized stock venue, after Wells Fargo, Cisco, Marvell, Arm, Moderna. and Intuit joined the list.
NEWS_COINTELEGRAPH · INFO
ECB official sees digital euro as key to protecting EU ‘sovereignty’
Piero Cipollone said the bloc is on track to test real transactions in 2027 and roll out a digital euro as early as 2029, pending legislation this year.
NEWS_COINDESK · INFO
Latvia targets tokenization rules in 2027 with commercial property in focus
Economics Minister Viktors Valainis says rules could arrive in the first half of next year, but an overdue assessment remains unfinished and no sovereign-bond issuance was identified.
NEWS_DECRYPT · INFO
Bitcoin ETFs Snap Two-Week Losing Streak Despite Late-Week Slide
Spot Bitcoin ETFs finished the week with about $301 million in net inflows, ending a two-week losing streak, even as two straight days of outflows kept October in the red.
NEWS_THEDEFIANT · INFO
Why Tokenized Stocks Can Trade Away From the Share Price
A closed-market buy-and-exit example shows how spreads and trade size affect execution. Minting and redemption follow a separate clock.
NEWS_THEDEFIANT · INFO
Tokenized Deposits vs. Stablecoins: What JPM Coin and USDC Holders Own
USDC holders can transfer tokens without a Circle Mint account, but direct dollar redemption requires one. JPM Coin limits participation to approved institutional clients.
NEWS_COINDESK · INFO
UK banks face 10,000 complaints in 3 months over crypto restrictions
The U.K. claims to aspire to become a global cryptocurrency hub, an ambition that would appear to be at odds with the attitude to crypto purchases of its major banks.
NEWS_COINTELEGRAPH · INFO
Netanyahu floats use of blockchain as solution to potential financial sanctions
Ahead of elections, Prime Minister Benjamin Netanyahu said Israel could turn to blockchain and crypto to skirt potential international sanctions, to the dismay of opponents and the country’s central banker.
NEWS_THEDEFIANT · INFO
Dogecoin Foundation and House of Doge End Exclusive Brand Deal
House of Doge keeps limited investment-product rights, while a separate deal would exchange Such App assets for $4 million in Dogecoin Labs stock.
NEWS_SECURITYWEEK · INFO
Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave
Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks. The post Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave appeared first on SecurityWeek .
NEWS_THEHACKERNEWS · INFO
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models. "Based on the current state of alignment research, monitoring systems, and the security of internet in
NEWS_THEDEFIANT · INFO
X100 Exploit Proceeds Split Into Four 400-ETH Wallets
The first exploiter swapped about 4.75 million USDT into ether, while the distribution wallet retained another 423 ETH.
NEWS_THEDEFIANT · INFO
Keystone Website Breach Exposes Customer Addresses and Order Details
The hardware-wallet maker says it blocked access and fixed the vulnerability. Payment details, recovery phrases and private keys were not exposed, according to the company.
NEWS_THEDEFIANT · INFO
Electrum Patches Wallet Flaw Exploited Through Malicious Servers
A malicious server can substitute a fake payment, then trick the user into signing it while raising the transaction fee. Developers say one user reported losing money.
NEWS_DECRYPT · INFO
Google Quietly Updates Privacy Policy to Let Gmail and Photos Data Feed Ads
A policy change effective Oct. 16 carves out an exception to Google’s long-standing pledge—letting connected Gmail, Drive, and Photos data personalize ads through its Personal Intelligence AI features.
NEWS_THEDEFIANT · INFO
ARB Touches Four-Week Low as Losses Outpace Bitcoin and Ether
OP and POL also lost more than a quarter over matched four-week windows, while Arbitrum One's active-address count rose.
NEWS_DECRYPT · INFO
Sweden's Government Offices Block ChatGPT and Claude, Keep Microsoft Copilot
Sweden's Government Offices will block ChatGPT and Claude on staff computers from Monday, steering civil servants to Microsoft Copilot as the only AI that passed its security review.
NEWS_COINDESK · INFO
Strategy, Strive face balancing act between bitcoin buying and preferred stock dividends
The securities have financed purchases of nearly 136,000 bitcoin, opening a funding channel that analysts expect to complement the larger ETF market.
NEWS_THEDEFIANT · INFO
Ether Falls Below $2,300 as 28-Day Loss Reaches 14.7%
ETH lagged bitcoin by 9.15 percentage points over matched nearly four-week windows, while US ether ETFs recorded another outflow on Oct. 22.
NEWS_COINDESK · INFO
Block's new voice AI sounds eerily human, sparking awe and scam fears
Reactions split between amazement at how human it sounds and fears it could fuel scams and deception, with CZ eyeing uses in children’s education.
NEWS_THEDEFIANT · INFO
Third X100 Exploit Transaction Pulls 550,000 X From Uniswap Pool
A different sender routed about 549,916 X and 1,909 USDT to a new beneficiary, while the affected pool held less than 200 USDT.
NEWS_COINDESK · INFO
Crypto under weekend pressure, bitcoin slides below $80,000 on U.S. Middle East evacuations
Bitcoin has sunk to its weakest level in more than one month.
NEWS_DECRYPT · INFO
Game Publishers Have Pushed to Cut Discs Since 2007, Infinity Ward Veteran Says
Robert Bowling, who spent six years working on Call of Duty, told Decrypt that Activision suggested cutting discs nearly two decades ago.
NEWS_COINDESK · INFO
Why McDonalds, Microsoft and Google saying no to tokenized stocks isn't a dealbreaker
Some of the world's biggest companies objected to being listed on the first tokenized securities trading venue under the SEC's innovation exemption. But the early pushback may say more about issuer caution than about rejection of tokenization itself.

Don't wait for Q-Day.

QorTrace audits smart contracts, scans wallets for cryptographic exposure, and certifies post-quantum readiness. The strongest hands move first.

Get auditedSee pricing