Tether USDT

Claim: Tether has not published a cryptographic inventory or quantum threat model covering admin key attack assumptions, affected assets, and affected layers.

Coverage basis: No public cryptographic inventory from Tether for token-specific admin infrastructure.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical uncertainty · Score treatment: score-reducing

Quantum blocker: No public cryptographic inventory from Tether for admin key infrastructure.

Assurance: Third-party research (Google Quantum AI, March 2026) has comprehensively documented the vulnerability of USDT admin keys. Tether itself has not published comparable documentation.

Tether's transparency page and regulatory filings cover financial reserves only. No cryptographic documentation is publicly available from Tether.

• https://tether.to/en/supported-protocols/
• https://tether.to/transparency/
• https://tether.to/public/Relevant_Information_Document_-_Tether_International,_S.A._de_C.V..pdf

Claim: Tether has not published code references, specs, audits, transaction examples, or reproducible analytics supporting a quantum risk assessment for admin keys.

Coverage basis: No Tether-published evidence record for quantum risk assessment.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical uncertainty · Score treatment: score-reducing

Assurance: Third-party evidence (Etherscan contract verification, Google Quantum AI paper, StablePQC analysis) is available and sufficient for evaluation, but Tether has not published its own evidence record.

Tether's GitHub organization (133 repos) contains no USDT token contracts, cryptographic implementations, or quantum risk documentation.

• https://github.com/tetherto

Claim: USDT admin functions (mint, burn, freeze, destroyBlackFunds) are authorized by ECDSA signatures from exposed EOAs on Ethereum and equivalent classical signatures on other host chains. No PQ or hybrid-PQC spend authorization exists.

Coverage basis: Token-specific admin authorization is entirely ECDSA/classical ECC-based.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: USDT admin functions on all host chains are authorized exclusively by quantum-vulnerable ECDSA signatures from exposed keys. No PQ or hybrid-PQC path exists.

Assurance: On-chain evidence is definitive. Etherscan shows the multisig contract code and signer addresses. Google Quantum AI paper independently confirms admin key exposure.

The Ethereum USDT contract (0xdAC17F958D2ee523a2206206994597C13D831ec7) implements Ownable with owner 0xC6CDE7C39eB2f0F0095F41570af89eFC2C1Ea828. Admin functions all require onlyOwner modifier, satisfied by multisig confirmation using ECDSA signatures from 6 exposed EOAs.

• https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7#code
• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828
• https://stablepqc.com/

Claim: All Ethereum multisig signer EOAs have sent transactions, permanently exposing their ECDSA public keys on-chain. No key rotation has occurred. Similar exposure exists on TRON and other chains.

Coverage basis: Admin key addresses are long-exposure at-rest targets with permanently exposed public keys.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: All known Ethereum multisig signer EOAs have permanently exposed ECDSA public keys. No key rotation or PQ migration design exists.

Assurance: The six signer addresses are independently documented. At-rest attack window is unlimited.

Ethereum EOA public key exposure occurs on first transaction. All six signers have confirmed multisig transactions over multiple years. TRON and Solana USDT admin keys face similar exposure models.

• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828
• https://explorer.bitquery.io/tron/trc20token/TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t/smart_contract

Claim: USDT is a token with no native consensus mechanism. This subfactor is N/A for token-specific evaluation.

Coverage basis: Token has no validator signatures, VRFs, randomness beacons, or consensus authentication.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

• https://tether.to/en/supported-protocols/

Claim: USDT supply integrity depends entirely on admin key security. No quantum-safe supply-binding mechanisms exist. Token state integrity is enforced by the admin-key-controlled mint/burn functions.

Coverage basis: Token supply integrity is gated by quantum-vulnerable admin keys.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: USDT supply integrity is entirely gated by quantum-vulnerable admin key signatures. A compromised admin key can mint unlimited unbacked tokens with no on-chain supply cap or cryptographic supply-binding mechanism.

Assurance: The TetherToken contract has no supply cap. The issue function mints tokens to any address and increases _totalSupply. No cryptographic commitment scheme binds supply to reserves on-chain.

• https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7#code

Claim: USDT has no privacy layer, ZK proofs, note encryption, viewing keys, or shielded state. This subfactor is N/A.

Coverage basis: Token has no privacy-specific cryptographic layer.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

• https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7#code

Claim: USDT is a token with no P2P network. This subfactor is N/A for token-specific evaluation.

Coverage basis: Token has no P2P transport or node identity layer.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

• https://tether.to/en/supported-protocols/

Claim: No PQ or hybrid-PQC wallet, custody, HSM, or hardware-wallet workflow exists for USDT admin key management. Admin signers use standard ECDSA wallets with no quantum-safe features.

Coverage basis: Admin key custody is entirely classical ECDSA-based with no PQ support.

Implementation score: 0 · Evidence confidence: Medium

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: No PQ or hybrid-PQC custody workflow exists for USDT admin keys. Signers use standard ECDSA EOAs with no quantum-safe HSM or hardware-wallet path documented.

Assurance: Tether has not publicly documented its admin key custody infrastructure. Evidence confidence is Medium because internal custody practices are not publicly verifiable. The on-chain evidence (exposed EOAs, standard multisig) supports the finding that no PQ workflows exist.

Tether's issuance primer describes a process designed to minimize private key exposure frequency, but this addresses operational security, not quantum resistance. The keys remain ECDSA-based.

• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828

Claim: Approximately 0% of the approximately $200B USDT ecosystem is protected from quantum-enabled admin key compromise. All admin keys on all host chains are quantum-vulnerable.

Coverage basis: 0% value-at-risk protection for token-specific admin key quantum vulnerability.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: Approximately $200B in USDT across all host chains is governed by quantum-vulnerable admin keys with 0% PQ protection.

Assurance: Value-at-risk figures sourced from usdt.network/blockchains and Tether transparency page as of mid-2026. The Google Quantum AI paper independently confirms USDT admin key exposure as a systemic risk.

Admin key compromise on any major chain would destroy the fiat peg across all chains due to market contagion, even if only one chain's keys were compromised.

• https://usdt.network/blockchains
• https://stablepqc.com/
• https://tether.to/transparency/

Claim: No critical USDT admin wallets (treasuries, multisig signers, deployer keys) have been migrated to PQ or hybrid-PQC schemes on any host chain.

Coverage basis: 0 critical admin wallets protected or migrated.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: No critical admin wallets migrated to PQ/hybrid-PQC. Ethereum multisig and all its signers remain ECDSA-only with no migration activity observed.

Assurance: Etherscan and Tronscan show no ownership transfer, key rotation, or contract migration activity related to quantum security as of 2026-06-01.

Tether has precedent for chain migration (e.g., sunsetting Omni, EOS, Algorand, Kusama, BCH-SLP support). The technical and organizational capability to migrate exists but has not been applied to quantum security.

• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828
• https://explorer.bitquery.io/tron/trc20token/TR7NHqjeKQxGTCi8q8ZY4pL8otSzgjLj6t/smart_contract

Claim: Tether has not publicly identified, measured, deprecated, or migrated quantum-vulnerable admin key infrastructure on any host chain.

Coverage basis: No identification or deprecation of vulnerable admin key infrastructure.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Assurance: Tether has deprecated several legacy chain deployments (Omni, EOS, Algorand, Kusama, BCH-SLP) for business reasons, demonstrating operational capability for chain-level migration. This capability has not been applied to quantum-vulnerable admin key deprecation.

• https://tether.to/en/supported-protocols/
• https://tether.to/transparency/

Claim: Tether has not published a post-quantum migration roadmap for USDT admin keys. No sequencing, activation criteria, or dependency mapping exists publicly.

Coverage basis: No public PQ migration roadmap for token admin infrastructure.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical uncertainty · Score treatment: score-reducing

Quantum blocker: No public PQ migration roadmap exists for USDT admin keys. Circle (USDC) published a comprehensive PQ roadmap in May 2026; Tether has no comparable document.

Assurance: Tether's news and announcements page contains no quantum-related entries as of 2026-06-01. The CEO's February 2025 statement acknowledged the threat but provided no timeline or plan.

Contrast with Circle's May 2026 whitepaper detailing a three-phase PQ migration for USDC including Arc blockchain PQ features, hybrid signature support, and recovery frameworks for non-migrated accounts.

• https://tether.to/
• https://tether.io/news/

Claim: No PQ or hybrid-PQC account creation, wallet tooling, transaction paths, custody paths, user-facing warnings, education, or migration prompts exist for USDT admin keys.

Coverage basis: No migration accessibility infrastructure exists.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: No migration accessibility infrastructure exists. The multisig supports owner replacement but no quantum-safe key scheme has been specified for replacement owners.

Assurance: The Gnosis Safe multisig contract supports owner addition, removal, and replacement, providing a technical mechanism for key rotation. However, no quantum-safe key format, signature scheme, or migration procedure has been specified.

• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828

Claim: No enforcement mechanisms, deprecation timelines, freeze/disabling of vulnerable signing paths, or exchange/custody coordination exist for USDT admin key quantum migration.

Coverage basis: No enforcement or coordination infrastructure for quantum migration.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Assurance: Tether has demonstrated enforcement capability through address blacklisting (963+ addresses frozen), chain deprecation (Omni, EOS, Algorand, Kusama, BCH-SLP), and coordinated exchange actions (OFAC freeze of $344M in April 2026). These capabilities could theoretically be applied to quantum migration enforcement but have not been.

• https://tether.to/en/supported-protocols/

Claim: No public quantum-specific incident-response process, emergency disclosure procedure, or governance mechanism exists for USDT admin key compromise.

Coverage basis: No public quantum-specific IR or governance process.

Implementation score: 0 · Evidence confidence: Medium

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: Tether has demonstrated operational incident response for non-quantum events (OFAC freezes, chain deprecations). A bug bounty program exists. No quantum-specific IR documentation is publicly available. Internal processes may exist but are not verifiable.

The pause function on the USDT contract provides an emergency brake that could limit damage from a detected admin key compromise, but detection of a quantum attack (which produces cryptographically valid transactions) would be difficult until unbacked minting is observed.

• https://tether.to/

Claim: USDT admin keys use ECDSA (secp256k1 on Ethereum, Ed25519 on Solana, equivalent ECC on TRON). No NIST-standardized PQC algorithms (ML-DSA, SLH-DSA, Falcon, XMSS, LMS) are used for any admin function.

Coverage basis: All admin authorization uses quantum-vulnerable classical ECC algorithms.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical vulnerability · Score treatment: score-reducing

Quantum blocker: All USDT admin authorization uses classical ECDSA/EdDSA. No NIST PQC algorithms deployed or planned.

Assurance: NIST published PQC standards (FIPS 203 ML-KEM, FIPS 204 ML-DSA, FIPS 205 SLH-DSA) in August 2024. No evidence Tether has evaluated or adopted any of these for admin key infrastructure.

• https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7#code
• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828#code

Claim: No independent cryptographic or implementation audit exists for USDT admin key quantum security. BDO quarterly attestations cover financial reserves only.

Coverage basis: No quantum-security audit of admin key infrastructure.

Implementation score: 0 · Evidence confidence: High

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: Tether's BDO attestations verify reserve composition at quarter-end. No audit covers admin key management, multisig security, key custody practices, or quantum resilience. A March 2026 announcement indicated Tether engaged a Big Four firm for a full financial audit; no cryptographic or quantum scope was mentioned.

• https://tether.to/transparency/

Claim: USDT contract code is verified on Etherscan and Tronscan. The Gnosis Safe multisig implementation is open-source. Tether does not actively publish or maintain contract source in its own GitHub organization.

Coverage basis: Contract code is publicly verifiable on third-party explorers but not published by Tether in its own repositories.

Implementation score: 1 · Evidence confidence: High

Issue classification: none · Score treatment: not applicable

Assurance: Contract bytecode is verified on Etherscan (TetherToken and MultiSigWallet). Source code matches deployed bytecode. Anyone can independently verify.

While the current (quantum-vulnerable) implementation is open-source and verifiable, this provides assurance for code review but does not contribute to quantum readiness since the code implements classical ECDSA-based admin controls.

• https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7#code
• https://etherscan.io/address/0xc6cde7c39eb2f0f0095f41570af89efc2c1ea828#code
• https://github.com/tetherto

Claim: No documented parameter agility or quantum upgrade path exists for USDT admin key infrastructure. The contract supports ownership transfer but no quantum-safe destination scheme.

Coverage basis: No documented upgrade path for quantum migration of admin keys.

Implementation score: 0 · Evidence confidence: High

Issue classification: quantum-critical uncertainty · Score treatment: score-reducing

Assurance: The TetherToken contract includes transferOwnership, deprecate, and upgradedAddress functions, providing a technical mechanism for migration. However, no quantum-safe destination address format, multisig scheme, or migration procedure is documented.

• https://etherscan.io/address/0xdAC17F958D2ee523a2206206994597C13D831ec7#code

Claim: USDT admin keys use stateless ECDSA/EdDSA signatures. Stateful signature safety is not applicable. No public documentation of side-channel, fault-injection, HSM, or custody risk assessment for quantum threat model.

Coverage basis: Stateful signature safety is N/A. Other implementation risks are not publicly documented.

Implementation score: 0 · Evidence confidence: Low

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: No public documentation exists for admin key custody architecture, HSM usage, or side-channel defenses. Evidence confidence is Low because internal security practices are opaque.

USDT admin signatures use stateless ECDSA (Ethereum, TRON) and Ed25519 (Solana), not stateful schemes like XMSS/LMS. The anti-reuse and signing-state discipline requirements of stateful hash-based signatures do not apply to the current implementation.

Claim: No performance or resource-impact analysis exists for potential PQ migration of USDT admin keys. PQ signatures are larger (2-10x) but impact would be limited to occasional admin transactions, not user transfers.

Coverage basis: No performance analysis published. Impact would be limited to admin operations.

Implementation score: 0 · Evidence confidence: Medium

Issue classification: assurance-only caveat · Score treatment: score-reducing

Assurance: Admin transactions (mint, burn, freeze) are infrequent compared to user transfers. PQ signature size impact on admin operations would be minimal. No formal analysis is published but the operational impact is likely manageable.