Quantum threat is the crypto industry's oldest boogeyman. Every few months, a startup emerges with a silver bullet. The latest is AmericanFortress. Their pitch is seductive: a quantum-safe encryption scheme that protects existing Bitcoin, Ethereum, and Solana wallets. No migration. No address changes. Just unbreakable security. Sounds revolutionary. It's also a textbook red flag.
Let's dissect this from where I sit – as a security auditor who has torn apart hundreds of DeFi protocols, Layer 2s, and even a few so-called 'quantum-resistant' projects. I've seen vaporware. I've seen scams. I've seen teams hide behind buzzwords. AmericanFortress checks every box on the 'skepticism needed' list.
Context: AmericanFortress is a name that, until this press release, existed nowhere in the cryptography community. No papers on ePrint. No talks at Real World Crypto. No GitHub repos with contributions. The announcement came via a news wire, not a peer-reviewed journal. Their sole claim: they have developed a quantum-safe encryption scheme that secures existing blockchain wallets without changing addresses or requiring fund migration. To anyone who understands post-quantum cryptography (PQC), this is extraordinary. NIST's standardised PQC signatures – CRYSTALS-Dilithium, Falcon, SPHINCS+ – all produce larger signatures and alter public key formats. That breaks the current address paradigm, which relies on hashes of elliptic curve (Secp256k1) public keys. AmericanFortress claims to have bypassed this fundamental incompatibility. No algorithm. No key encapsulation mechanism. No mathematical proof. Just a promise.
Now the core: this is where we apply the forensic scalpel. I start with the most basic question: where is the code? There is none. No open-source repository. No whitepaper with theorems. No implementation for the community to test. In 2026, any credible cryptographic project ships with at least a reference implementation. Zero code indicates either extreme secrecy or – more likely – the absence of a working prototype. I've audited over 200 smart contracts and cryptographic protocols. Projects that cannot produce a single line of auditable code are either incompetent or malicious. AmericanFortress falls into this bin.
Next: the technical claim itself. The existing blockchain address is the RIPEMD-160 hash of the SHA-256 hash of the uncompressed public key. Quantum-safe signatures fundamentally change the public key structure. To preserve the same address, you would need to either (a) embed a quantum-resistant commitment inside the existing address format (impossible without a network upgrade) or (b) use a scheme where the address is a hash of a quantum-resistant public key that somehow mimics the old format. No known PQC scheme allows this without altering validation rules. The alternative is to use a threshold or multi-party computation scheme that wraps the existing key, but that introduces trust assumptions and does not eliminate the underlying vulnerability. AmericanFortress does not specify which path they claim. They offer no details, no security model, no trust assumptions. Standardization fails when it ignores human chaos – but here, there is nothing to standardize.
Let's talk about the audit condition. AmericanFortress has not undergone any independent security audit. My firm, and every reputable auditor like Trail of Bits, Quantstamp, or Halborn, would require at least a formal specification and a reference implementation before considering an engagement. Without that, any claim of 'security' is marketing, not engineering. I have personally seen projects that pass audits still have critical vulnerabilities. An unaudited cryptographic scheme is not a scheme; it's a wish.
Now the market side. This announcement has generated zero organic discussion. No threads on EthResearch, no questions on Stack Exchange, no controversy on Crypto Twitter. The silence is deafening. In code, silence is the loudest vulnerability. The lack of community scrutiny suggests that either no one takes this seriously, or the project is so under the radar that it hasn't been noticed. Either way, it's not a signal of promise.
Logic is binary; trust is a spectrum. AmericanFortress currently sits at the zero end of that spectrum. They have not earned any trust. They have not provided grounds for logic to operate. Their claim is either a lie, a misunderstanding, or a breakthrough so profound that it should be immediately published in a top conference journal. Given the absence of any academic footprint, I lean toward the first two options.
Now the contrarian angle. It is possible – remotely – that AmericanFortress has developed a genuine innovation. Perhaps they have found a way to use quantum key distribution (QKD) or a novel zero-knowledge proof that compresses a quantum-safe signature into the existing address footprint. Perhaps they have a cryptographic primitive that no one else has thought of. But if that were true, they would not announce it via a press release. They would submit to Crypto 2026 or Eurocrypt. They would file patents. They would engage with the community. The fact that they chose a marketing-first approach suggests a different agenda: build hype, raise funding, or worse – extract funds from fearful users. The quantum threat is real but distant. Shor's algorithm requires a fault-tolerant quantum computer with thousands of logical qubits. Current machines are orders of magnitude away. The urgency is manufactured.
Takeaway: AmericanFortress's quantum-safe promise is, as of today, indistinguishable from noise. No code, no team, no audit, no mathematical proof. If you hold Bitcoin, Ethereum, or Solana, your assets are safe from quantum attacks for the foreseeable future – provided you follow standard security practices (hardware wallets, secure seed storage, verified software). Do not fall for panic-driven migration. Publish the algorithm. Release the code. Submit to a formal audit. Until then, treat this as a ghost story. The blockchain remembers everything, but the auditors forget nothing. Are you willing to trust your keys to a ghost?