BNB Chain Publishes Research Report Exploring Post-Quantum Cryptography Migration Path for BSC

• Native transfer throughput would drop from 4,973 TPS to 2,997 TPS under post-quantum migration, a 40% reduction in capacity.
• Transaction size would balloon from 110 bytes to approximately 2.5 KB, and block size from 110 KB to 2 MB, creating network propagation bottlenecks.
• Validator signature aggregation achieved 43:1 compression using pqSTARK, keeping consensus-layer overhead manageable despite larger individual signatures.

• 2.5 KB Post-quantum transaction size versus 110 bytes in current BSC operations
• 40% Throughput decline from 4,973 to 2,997 native transfer TPS under migration
• 43:1 Validator signature compression ratio achieved by pqSTARK aggregation layer

BNB Chain has released a comprehensive technical evaluation of how the BSC mainnet could transition to post-quantum cryptographic primitives, mapping out the path, performance costs, and architectural bottlenecks that would accompany such a migration.

The research focuses on replacing traditional ECDSA transaction signatures with ML-DSA-44, a quantum-resistant algorithm, and deploying pqSTARK aggregation for validator consensus signatures.

While quantum computers remain theoretically incapable of threatening existing blockchain cryptography in production systems, the work reflects institutional-grade infrastructure planning for a future threat horizon that could emerge within 10 to 20 years.

The research represents a departure from typical blockchain development, which has historically treated cryptographic foundations as immutable. Instead, BNB Chain is publishing concrete engineering data on the feasibility, cost, and timing of a controlled migration, information that will likely inform how other L1 chains and institutional custodians approach quantum readiness.

Post-Quantum Migration Cuts Throughput by 40% While Network Overhead Emerges as Primary Constraint

The most significant finding from BNB Chain’s testing is that post-quantum readiness is technically achievable, but the performance penalty falls almost entirely on network layer efficiency rather than cryptographic computation.

Transaction sizes would expand 23-fold, from 110 bytes to roughly 2.5 kilobytes, and block sizes would grow proportionally from 110 KB to 2 MB. These larger data structures create measurable propagation delays across the BSC validator network, particularly in cross-region consensus rounds.

The throughput impact is concrete: native transfer transactions per second would decline from 4,973 TPS to 2,997 TPS, representing a 40% capacity loss.

For comparison, Ethereum currently processes around 12-15 transactions per second on its base layer, making BSC’s post-quantum throughput still substantially higher than the dominant settlement layer, but meaningfully lower than BSC’s current competitive positioning among high-throughput L1s.

Solana, by contrast, claims 65,000 theoretical TPS, though finality and consistency remain distinct from raw throughput claims.

The report makes clear this penalty stems from data propagation overhead, not signature verification speed itself.

Validator Consensus Remains Efficient Despite Larger Signature Sizes Through pqSTARK Aggregation

A critical mitigating factor emerges in the validator consensus layer, where BNB Chain’s testing of pqSTARK aggregation achieved a 43:1 compression ratio on validator signatures.

This means that while individual post-quantum signatures are substantially larger than ECDSA equivalents, cryptographic aggregation techniques can compress validator consensus data back into a manageable footprint, preventing the validator set from becoming a scaling bottleneck.

This distinction matters operationally. In Ethereum’s proof-of-stake model, validators are already aggregating signatures using BLS aggregation; switching the underlying cryptographic scheme would not require a fundamental rearchitecture of consensus, merely a substitution of the aggregation scheme itself.

BNB Chain’s pqSTARK results suggest that post-quantum consensus layers can achieve similar efficiency gains, keeping the overhead manageable even as transaction-level data expands.

The implication is that transaction throughput, not validator coordination, would be the binding constraint in a post-quantum BSC.

Public Key Storage and Cross-Chain Interop Remain Outside Current Scope, Requiring Ecosystem Coordination

BNB Chain explicitly notes that several critical infrastructure components were deliberately excluded from this evaluation, including post-quantum replacements for P2P handshake cryptography and KZG commitments used in rollup verification.

These omissions are not trivial: KZG commitments anchor the security model of Ethereum’s EIP-4844 blob storage, and similar commitment schemes underpin interoperability between L1s and L2s across the broader ecosystem.

The research acknowledges that any production migration to post-quantum cryptography would require coordination far beyond a single chain. Bridges between BSC and other L1s, custodial systems, and cross-chain messaging protocols would all need simultaneous or staged upgrades to prevent cryptographic asymmetries that could create exploit vectors.

This coordination problem is why the National Institute of Standards and Technology (NIST) finalized post-quantum cryptography standards only in August 2022, after a multi-year public vetting process, ecosystem lock-in and standardization are prerequisites, not afterthoughts.

BNB Chain frames the research as a long-term infrastructure study rather than a response to immediate threat, a distinction that matters for institutional risk assessment. No known quantum computer currently poses a threat to blockchain cryptography, and the timeline for such capability remains highly uncertain.

The research appears aimed at establishing technical readiness and identifying architectural constraints that will need to be solved over the next 5-10 years as quantum computing matures.

Institutional Custody and Bridge Security Expose Longer Time Horizon Than Commonly Assumed

For institutional investors and custodians, the real urgency of post-quantum migration stems not from an imminent quantum threat to mainnet validators, but from the longer security lifespan of stored private keys.

A large institutional holding locked in cold storage today could potentially remain vulnerable to “harvest now, decrypt later” attacks, where an adversary records encrypted transactions or signatures today and waits for quantum capability to break the key material retroactively.

This risk applies most sharply to bridge custody and long-term holdings. If a custodian holds private keys for five or ten years, and quantum computers become capable of breaking ECDSA within that window, the holder faces immediate loss.

This asymmetry explains why major custodians and institutions have quietly begun evaluating post-quantum key migration strategies, independent of when mainnet protocols migrate. Fidelity, Coinbase Custody, and other institutional-grade services will likely face pressure to offer post-quantum key management options before any blockchain infrastructure makes the switch.

BNB Chain’s research thus accelerates institutional timeline pressure rather than mainnet urgency.

40% Throughput Loss Suggests Post-Quantum Networks May Require New Scaling Architecture

The BSC testing results illuminate a broader architectural question: if a major L1 chain faces 40% throughput loss under post-quantum migration, can that be offset through layer 2 scaling, or does it fundamentally alter the economics of high-throughput chains?

Optimistic rollups and ZK-rollups both rely on signature verification for both execution and verification; moving to post-quantum primitives would ripple through the entire scaling stack.

This suggests that post-quantum blockchains may emerge with different scaling patterns than current networks. Rather than competing primarily on mainnet throughput, post-quantum L1s might optimize for rollup verification efficiency or move consensus to threshold schemes that are naturally quantum-resistant. Chains built around threshold cryptography

Original reporting: cryptopotato.com