Rules

Methodology

custody.fail asks one question: does this crypto custodian sign client assets with post-quantum cryptography today? Each custodian is graded from its own published pages, reviewed 2026-10-18.

Every grade comes from the custodian's own published pages, linked on its page. None found means we found no post-quantum statement there, not that the custodian is insecure. No figure here is assets under custody. Read the methodology.

Which custodians

The roster is standalone crypto custodians, chosen by hand. Exchanges and wallet-infrastructure vendors are out of scope. All 8 custodians on the roster are graded. A custodian that is not on the roster has simply not been reviewed.

The three grades

Each custodian gets one grade, based only on what it has published. The source is linked on every custodian page.

Grade	Meaning
Signing today	The custodian says that client assets are signed in production with a NIST post-quantum scheme such as ML-DSA, SLH-DSA, Falcon, or XMSS.
Published plan	The custodian has published a roadmap, pilot, or deployment of post-quantum cryptography in its key management or signing stack, but does not yet sign client assets with it.
None found	We found no post-quantum statement on the custodian's security and custody pages. The page we reviewed is linked. This describes what the custodian has published, not how secure it is.

The headline counts the custodians graded Signing today. Because the grade rests on the custodian's own statement, a custodian that signs with a post-quantum scheme but has not said so publicly still shows as not signing. Published plans appear on the site but do not count toward the headline. Tools that manage quantum risk for classical keys, such as address hygiene or exposure scores, do not count as a plan on their own, and neither does post-quantum TLS. The plan has to reach key management or signing.

Post-quantum coins on the asset list

Each row also shows how many coins on the custodian's public asset list are post-quantum coins, over the size of that list. A post-quantum coin is one on the Quantum Canary roster, the same list used by exchange.fail and vc.fail, dated 2026-09-30. This count is context, not the grade. Supporting a chain that has a post-quantum option says nothing about how the custodian signs.

A coin on a custodian's list counts when either is true:

Its ticker is in the map below.
Its name matches a post-quantum coin whose ticker is shared with another token. Quantus counts by name. QTC alone does not.

Ticker	Coin
NEAR	NEAR Protocol
ALGO	Algorand
STRK	Starknet
QRL	Quantum Resistant Ledger
QANX	QANplatform
ABEL	Abelian

Tickers matched by name only

Ticker	Coin	Why
QTC	Quantus	QTC is also Qitcoin's ticker, so the ticker alone cannot be tied to Quantus. A list that names Quantus still counts.
XX	XX Network	A two-letter ticker collides with unrelated tokens. A list that names XX Network still counts.
CELL	Cellframe	CELL is also used by unrelated tokens. A list that names Cellframe still counts.
NXS	Nexus	NXS is shared with unrelated projects. A list that names this Nexus still counts.
ITX	INTMAX	ITX is shared with other tokens. A list that names INTMAX still counts.
MCM	Mochimo	MCM is shared with other tokens. A list that names Mochimo still counts.
QUIP	Quip Network	QUIP is shared with other tokens. A list that names Quip Network still counts.

What this site does not say

None found is not proof that the custodian has no plan.
A published plan is not proof that it has shipped.
A post-quantum coin on the asset list says nothing about the custodian's own keys.
Wrapped or bridged versions under another ticker do not count.
No figure is assets under custody.

Sources

Custodian	Grade	Grade source	Asset list
Coinbase Custody	Published plan	Source	Source
BitGo	Published plan	Source	Source
Anchorage Digital	Published plan	Source	Source
Strongpoint	Published plan	Source	Source
Komainu	None found	Reviewed	Source
Hex Trust	None found	Reviewed	Source
Gemini Custody	None found	Reviewed	Source
Fidelity Digital Assets	None found	Reviewed	Source