QA Engineer

Halborn audit validates QRL's post-quantum cryptography library. Independent review finds no cryptographic vulnerabilities; all 13 findings rated Informational 3rd April 2026 ZUG, Switzerland - April 3, 2026 - The Quantum Resistant Ledger (QRL) released the results of an independent security audit of its post-quantum cryptography library, conducted by blockchain security firm, and security partner, Halborn. The audit found no cryptographic vulnerabilities. All 13 findings were rated Informational, the lowest severity level, and the core signing, verification and key generation logic was validated as correct. All findings have since been resolved through code fixes or formal documentation. The audit covers the two post-quantum digital signature packages at the heart of QRL's network, both implementing signature schemes approved by the National Institute of Standards and Technology (NIST) as part of its post-quantum cryptography standardization process. The validated packages address a structural vulnerability present in most existing blockchain infrastructure. The majority of public blockchain networks rely on elliptic curve cryptography (ECC), a public-key scheme that a cryptographically relevant quantum computer (CRQC) could compromise, putting more than $2 trillion in digital assets at risk. That timeline has grown more concrete in recent years. Google's Willow processor demonstrated below-threshold quantum error correction in December 2024, IonQ's published roadmap projects a CRQC as early as 2028, and a Google research paper published March 30, 2026, warned that cryptographic migrations need to begin without delay while highlighting QRL as a presently post-quantum secure blockchain. Asset managers including BlackRock have flagged quantum computing as a material security risk to Bitcoin. The Halborn audit is the latest in a series of third-party reviews of QRL's architecture. QRL's 1.x network launched in 2018 with post-quantum cryptography as a foundational design requirement and was externally audited by X41 D-sec and Red4sec, among the earliest public blockchain networks to undergo such review at launch. QRL 2.0 extends that posture by incorporating quantum-safe smart contracts, a proof-of-stake consensus layer and continued third-party security audits from qualified firms. "We have successfully completed our security assessment of QRL's post-quantum cryptography library. The fact that all findings were classified as informational highlights the project's strong security posture. Collaboration throughout the engagement was seamless, with the QRL team demonstrating responsiveness and efficiency in addressing all observations. We are happy to support their initiative to advance toward a quantum-secure future." - Gabi Urrutia, SVP Security & Field CISO at Halborn The full audit report is available on the Halborn website. Previous QRL security audits are accessible in the QRL GitHub repository. About The Quantum Resistant Ledger. QRL 2.0 is a proof-of-stake blockchain built with NIST-approved post-quantum cryptography from its initial launch. The network supports EVM-friendly smart contracts, NFTs and digital identities through the QRVM and the Hyperion smart contract language. More information is available at www.theqrl.org. About Halborn. Halborn is the industry-leading blockchain solutions firm for enterprise-grade digital assets, trusted by the top financial institutions and blockchain ecosystem leaders. Experience world-class, end-to-end security, from smart contract auditing and pen testing to advisory services and beyond. Media contact. 3rd April 2026

Halborn partners with Knova to support secure tokenized market infrastructure. 03.12.2026 Halborn is excited to announce its partnership with Knova. As the trusted cybersecurity partner for the Knova ecosystem, Halborn will support institutions operating across traditional financial systems and the digital asset ecosystem. Halborn is also proud to join Knova's Tokenized Markets Circle, a group of leaders shaping the next generation of tokenized financial markets. As banks, asset managers, and fintechs expand into stablecoins and tokenized assets, risk increasingly sits at the seams between systems. Integrations between banking platforms, custodians, wallets, and blockchain networks introduce new operational and security challenges. Knova addresses this challenge with software that runs directly within a client's environment or cloud infrastructure. The platform acts as a unified operating layer that allows institutions to represent, move, and manage fiat, securities, stablecoins, crypto, and tokenized assets through one consistent system. "As institutions expand into stablecoins and tokenized assets, security across interconnected systems becomes mission critical. We chose Halborn for their deep expertise securing digital asset infrastructure alongside traditional systems. Their work is highly value aligned with what we are doing at Knova, and the flexibility in how they work with institutions truly allows them to address real client needs," said Natalya Thakur, CEO of Knova. "We're thrilled to partner with Knova as their trusted cybersecurity partner. Knova is building critical infrastructure for institutions operating at the intersection of traditional finance and digital assets. At Halborn, we bring deep, hands-on security expertise to help organizations scale tokenized market strategies with the confidence, resilience, and security required for institutional adoption," said Julie Aurand, Head of Strategic Partnerships and Business Development at Halborn. Together, Halborn and Knova aim to help institutions scale tokenized asset strategies with the security and operational resilience required for institutional adoption. Get in touch to find out more. Disclaimer. The information in this blog is for general educational and informational purposes only and does not constitute legal, financial, or professional advice. Halborn makes no representations as to the accuracy or completeness of the content, which may be updated or changed without notice. THIS WEBSITE USES COOKIES Halborn Inc. use cookies to personalise content and ads, to provide social media features and to analyse its traffic. Halborn Inc. also share information about your use of its site with its social media, advertising and analytics partners who may combine it with other information that you've provided to them or that they've collected from your use of their services. You consent to its cookies if you continue to use its website. Learn More.

Decrypt’s Art, Fashion, and Entertainment Hub. Discover SCENEElon Musk’s claim that the DDoS attack on X (formerly Twitter) originated from Ukraine drew skepticism from cybersecurity experts, who argue that attributing attacks based on IP addresses is unreliable.Attackers frequently use virtual private networks (VPNs) and other methods to obfuscate their origins, making pinpointing a specific geographic source difficult.On Monday, X was the target of a distributed denial-of-service attack that intermittently shut down the popular social media site for users worldwide. The X DDoS attack was linked to Dark Storm Team, a notorious hackivist group known for launching similar large-scale cyber disruptions.Hours after the attack, Musk claimed during an interview with Fox Business that the IP addresses associated with the attack originated in the Ukraine area.Tech-savvy users on X quickly pointed out that IP addresses can be masked or spoofed, making them appear to originate from one region when they actually originate from another.Dear Elon:You can't attribute an attack to any geographic location by IP address alone.See: VPN, location spoofing, etc.Also See: How botnets are controlled remotelyAlso Also See: Ask a cybersecurity person to help you. — MikeTalonNYC (@MikeTalonNYC) March 10, 2025Cybersecurity professionals also cautioned against drawing conclusions based solely on IP address data.“If one were conducting a DDoS attack you wouldn't necessarily see each connection originating from an IP address from a specific nation or netblock,” Scott Renna, Senior Solutions Architect with blockchain security firm Halborn, told Decrypt. “By definition, the attack would have to come from multiple IP addresses.”Renna pointed out that attackers distribute their traffic across numerous locations to avoid detection and mitigation efforts.“From an optics perspective and a blocking and prevention standpoint, it's just not how it's typically done,” he said.While the origins of the X attack remain a mystery, DDoS-as-a-Service websites are popping up to facilitate the launch of large-scale attacks. These websites let customers pay to launch DDoS attacks.There are two main types of DaaS."Stresser" services, which are legitimate tools companies use to test and strengthen their IT infrastructure