Skip to content
QuantumScanPublic scan report

Repository

lightningnetwork/lnd

Scanned on Jun 5, 2026

78

Risk score/ 100

High risk

Summary

The Lightning Network Daemon (lnd) relies heavily on quantum-vulnerable elliptic curve cryptography (ECDSA, secp256k1, ECDH) across critical components including node authentication, channel establishment, and payment routing. One critical finding involves the use of the obsolete 3DES cipher in TLS configuration. The pervasive use of Bitcoin's secp256k1 curve throughout the codebase poses significant quantum computing risks that could compromise channel funds and node identities when large-scale quantum computers become available.

Critical

1

High

18

Medium

0

Low

0

Top findings

  • Critical3DES / TripleDES

    cert/tls.go:14

  • Highsecp256k1 (Bitcoin curve)

    brontide/fuzz_test.go:14

  • HighECDSA

    brontide/fuzz_test.go:111

    ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

  • Highsecp256k1 (Bitcoin curve)

    brontide/fuzz_test.go:116

  • Highsecp256k1 (Bitcoin curve)

    brontide/noise.go:26

+ 14 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan