quantumscan-io/scanner-core

Scanned on Jun 26, 2026

Risk score/ 100

Clean

Summary

This repository contains test files cataloging quantum-vulnerable cryptographic patterns (Ed25519, sr25519, ECDSA, X25519) used in Substrate/Polkadot blockchain frameworks. All 44 HIGH findings and 4 MEDIUM findings are regex pattern definitions in test suites, not active production cryptographic implementations. No operational HNDL risk exists as these are detection patterns, not live key material.

Critical

High

Medium

Low

Top findings

HighCWE-327Ed25519 / EdDSA
test/substrate-patterns.test.js:13
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA
Raw evidence
```
*   5. schnorrkel / ed25519-dalek / x25519-dalek / libp2p-noise
```

HighCWE-327Ed25519 / EdDSA

test/substrate-patterns.test.js:24

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA

Raw evidence

re: /GrandpaId|grandpa_generate_session_keys|ed25519::(?:Public|Pair|Signature)\b|GrandpaAuthorityId|AuthorityList.*grandpa|GrandpaKeyType|GRANDPA_ENGINE_ID/i },

HighSubstrate Session Keys (multi-key)

test/substrate-patterns.test.js:26

Await Polkadot PQC session key migration RFC

Raw evidence

re: /impl_opaque_keys!\s*\{|SessionKeys\s*\{[^}]*(?:babe|grandpa|im_online|authority_discovery)|generate_session_keys|decode_session_keys/i },

HighSubstrate Validator Keystore

test/substrate-patterns.test.js:28

Monitor substrate-crypto PQC keystore RFC

Raw evidence

re: /KeystorePtr|SyncCryptoStorePtr|LocalKeystore::open|keystore\.(?:sr25519_generate_new|ed25519_generate_new|ecdsa_generate_new)|sp_keystore|CryptoStore/i },

HighCWE-327ECDSA

test/substrate-patterns.test.js:30

ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)

Raw evidence

re: /sp_runtime::traits::Verify|MultiSignature|AnySignature|sp_core::(?:sr25519|ed25519|ecdsa)::Signature|(?:Sr25519|Ed25519|Ecdsa)Signature\b/i },

+ 43 more findings in the full report

Scan your own repository

Free. Results in ~90 seconds. CBOM + DORA/NIS2 PDF included.

Start a free scan