TRON Activates Post-Quantum Signatures on Nile Testnet

TRON activated post-quantum signatures on its Nile Testnet on July 2, 2026, becoming one of the first major public blockchains to ship NIST-standardized quantum-resistant signatures in a live testing environment. Founder Justin Sun announced the activation on X, confirming that Committee Proposal No. 20628 passed at 12:10 Singapore time and that FN-DSA-512 is the first post-quantum algorithm to go live on the network.

The change is testnet-only. Production deployment on TRON’s mainnet still requires a separate community vote and months of developer testing, and TRON has not set a hard date for that vote. What has changed is that wallets, exchanges, and validators can now point their integration scripts at a public environment that already enforces the new cryptography.

What Nile Testnet Activated on July 2

The upgrade, named GreatVoyage-v4.8.2-PQ1-build1, was deployed on June 30 and went live with post-quantum capability on July 2, per the GitHub record of TRON Improvement Proposal 899. Sun framed the move as preparation for a future quantum threat, writing that TRON is “taking action to build the most secure blockchain for the post-quantum age.” The committee vote activates two algorithms at once, though each has its own on-chain proposal and can be switched on independently.

The post-quantum signature system covers four parts of the TRON protocol at once: ordinary transactions, Super Representative block production, peer-to-peer relay handshakes between nodes, and TVM smart-contract verification through new precompiled contracts. The activation does not change TRON’s 21-byte address format or its account structure, so the existing ecosystem is unaffected until mainnet activation.

The Two Lattice Algorithms Now Live

Both algorithms TRON shipped are lattice-based, meaning their security rests on hard math problems in high-dimensional grids rather than the elliptic-curve math that underpins today’s signatures. The US National Institute of Standards and Technology, or NIST, finalized three post-quantum signature standards in August 2024, including ML-DSA, FN-DSA, and SLH-DSA, all designed to withstand attacks from quantum computers. TRON picked the first two for this deployment.

FN-DSA-512 is the algorithm Proposal No. 20628 specifically activated. It is a renamed version of Falcon-512, a scheme that produces compact signatures and has a draft standard at FIPS 206. ML-DSA-44, renamed from Dilithium-2, has already been finalized at FIPS 204 and is the heavier of the two. The tradeoffs show up immediately in size.

Current ECDSA signatures on TRON and most blockchains run about 64 to 72 bytes, per Crypto Briefing’s read of the upgrade. FN-DSA-512 produces variable-length signatures capped at 667 bytes. ML-DSA-44 produces fixed signatures at 2,420 bytes. Public keys balloon too, from 33 bytes today to 896 bytes for FN-DSA-512 and 1,312 bytes for ML-DSA-44. The difference matters because every byte rides through the network on every transaction.

Both algorithms are gated on the same hard-fork version flag, VERSION_4_8_2_PQ1, and each requires its own committee proposal. ML-DSA-44, the heavier option, has not been activated yet. A second on-chain vote will be needed before any transaction on Nile can be signed with it.

Bitcoin and Ethereum Are Still on the Sidelines

Sun positioned the move as a contrast with larger chains that have only begun discussing the problem. “While Bitcoin debates whether to freeze vulnerable coins and Ethereum forms research committees, Tron is building,” Sun wrote on X in April. The framing is partly his, but the underlying schedule gaps are documented elsewhere.

While Bitcoin debates whether to freeze vulnerable coins and Ethereum forms research committees, Tron is building.

The Ethereum Foundation launched its Post-Quantum Ethereum website in March and projects that Layer 1 protocol upgrades could finish by 2029, though full migration of the execution layer would take additional years beyond that, per BeInCrypto’s reporting. Bitcoin has no equivalent timeline. The TRON protocol’s own TIP-899 cites a Project Eleven figure that Bitcoin alone has over 6.9 million BTC, roughly one third of the total supply, sitting in addresses with exposed public keys.

Solana has gone further than Ethereum on testnet deployment. The Solana Foundation has already deployed post-quantum digital signatures on a Solana testnet, according to the same BeInCrypto write-up. Coinbase’s CEO, Brian Armstrong, announced an independent advisory board in January 2026 dedicated to quantum computing and blockchain security, and Google has publicly targeted a 2029 migration to post-quantum cryptography across its own infrastructure. The clock is set differently on every chain.

The 667-Byte Problem Inside Larger Signatures

A signature size jump from 64 to 72 bytes up to 667 bytes is not free. A jump to 2,420 bytes is a different conversation, one that involves bandwidth costs, storage requirements, and downstream effects on every wallet, explorer, and decentralized application that touches the chain, per Crypto Briefing.

The TIP-899 design accounts for the impact through its energy pricing. A single post-quantum verification on the new TVM precompiles costs 3,000 energy, exactly twice the 1,500 baseline of the existing ECDSA ECRecover precompile. Batch verification charges 2,400 energy per signature. Multi-signature operations charge 1,500 per ECDSA entry and 2,400 per PQ entry, with a cap of five signers per call. The numbers matter because TRON processes large volumes of stablecoin transfers, and any extra cost compounds across that traffic.

The downstream pieces that have to change before a mainnet vote include:

• Wallet providers such as TronLink, which must handle larger transaction payloads and key files.
• Exchanges that support TRON deposits and withdrawals, which have to update signing and verification logic.
• Block explorers, which must parse and display new signature types.
• Smart contract developers, who need to integrate with the five new TVM precompiles at addresses 0x02000016 through 0x0200001a.
• Full nodes and Super Representatives, which carry the extra bandwidth and storage cost on every block.

If post-quantum signatures increase per-transaction data by 10x to 30x compared with current ECDSA signatures, the aggregate bandwidth impact could be material, Crypto Briefing reports. That is the work the testnet is built to expose.

How TRON Plans to Reach Mainnet

Sun said in April that the mainnet rollout is set for Q3 2026, though the committee vote on Proposal No. 20628 itself does not establish a launch date. The architecture designed in TIP-899 supports a hybrid mode in which a single transaction can carry a mix of ECDSA, FN-DSA-512, and ML-DSA-44 signers, so multi-sig accounts can authorize with whatever combination they prefer.

Address derivation also stays the same. Post-quantum addresses use the standard 0x41 prefix plus Keccak-256 of the public key, producing the same 21-byte T-prefixed format as today’s accounts. The plan is a slow migration rather than a flag day, with users and infrastructure providers able to adopt new keys at their own pace before any cutover.

The Quantum Clock Rivals Are Now Racing

The motivating threat is theoretical for now. No publicly available quantum computer can currently break major blockchain signature systems, and the upgrade is preventive rather than a response to an active attack. The defensive math rests on the fact that ECDSA can be broken by a quantum computer running Shor’s algorithm in minutes, while FN-DSA-512 and ML-DSA-44 are built on hard problems that Shor’s algorithm does not apply to.

How soon that theoretical attack becomes a practical one is the open question. Amazon’s top AI and quantum executive, Peter DeSantis,

Logan Pierce

Logan Pierce is a writer and web publisher with over seven years of experience covering consumer technology. He has published work on independent tech blogs and freelance bylines covering Android devices, privacy focused software, and budget gadgets. Logan founded Oton Technology to publish clear, no nonsense tech news and reviews based on real hands on testing. He has personally tested and reviewed dozens of mid range and budget Android phones, written extensively about app privacy, and built and managed multiple WordPress publications over the past decade. Logan holds a bachelor's degree in English and studied digital marketing at a certificate level.