{ "chain_slug": "zksync-era", "name": "zkSync Era", "scorecard_profile": "rollup-L2", "evaluated_at": "2026-04-17", "evaluator": "layerqu-v2-scoring-agent-5", "v1_reference": "chainscreen-v1-archive", "dimensions": { "1_cryptographic_exposure": { "weight": 0.15, "score": 34, "sub_scores": { "1a_primitive_inventory": { "score": 12, "primitives_named": [ "ECDSA secp256k1 (user signatures)", "Keccak-256 + Poseidon (hashing)", "Boojum (next-gen STARK-like prover with FRI-friendly commitments)", "PLONK on BN254 (current prover)" ], "evidence": [ "v1:chainscreen-v1-archive/data/chains/zksync-era.json" ], "note": "Native AA from genesis; Boojum prover transitions toward FRI-based (PQ-safe proofs on roadmap but current Era still PLONK/BN254)." }, "1b_shor_grover_pq_tag": { "score": 10, "tags": { "ECDSA secp256k1": "Shor-break", "PLONK-BN254": "Shor-break", "Boojum/FRI (future)": "PQ-safe (hash-based)", "Poseidon": "Grover-weaken" }, "evidence": [] }, "1c_algorithm_family_diversity": { "score": 4, "families_represented": 0, "families": [], "note": "Current mainnet: no PQ family. Boojum roadmap introduces hash-based path." }, "1d_nist_security_category": { "score": 4, "mappings": { "ECDSA": "128-bit classical" }, "evidence": [] }, "1e_implementation_quality": { "score": 4, "formal_verification": "PLONK/Boojum circuits audited; era-fork audited", "constant_time": "standard", "libraries": [ "era-node", "era-boojum" ], "evidence": [] } }, "total_artifacts": 1 }, "2_hndl_exposure": { "weight": 0.1, "score": 28, "sub_scores": { "2a_active_key_exposure": { "score": 7, "note": "Native AA: per-account key migration possible; user keys inside smart accounts." }, "2b_cold_key_exposure": { "score": 7, "note": "~3 years mainnet; moderate dormant." }, "2c_signature_longterm_validity": { "score": 7, "note": "Historical ECDSA sigs Shor-forgeable; AA enables rotation for new sigs." }, "2d_encryption_confidentiality": { "score": 7, "note": "TLS; no PQ KEM." } }, "total_artifacts": 1 }, "3_metadata_privacy_exposure": { "weight": 0.1, "score": 25, "sub_scores": { "3a_tx_graph_visibility": { "score": 6, "note": "Transparent ledger." }, "3b_rpc_mempool_concentration": { "score": 6, "note": "Matter Labs sequencer (centralized)." }, "3c_cross_chain_bridge_correlation": { "score": 7, "note": "Canonical bridge + LayerZero." }, "3d_retroactive_deanon_risk": { "score": 6, "note": "No shielded pools." } }, "total_artifacts": 1 }, "4_migration_architecture": { "weight": 0.18, "score": 72, "sub_scores": { "4a_crypto_agility": { "score": 19, "note": "Native AA from genesis; Matter Labs has signature-scheme flexibility at the contract level. Boojum architecture allows prover swap without user changes." }, "4b_account_abstraction_key_rotation": { "score": 20, "note": "Full AA: every account is a contract. Per-account signature validation means ML-DSA/Falcon can be added via verifier contracts. Among strongest AA in batch alongside Starknet." }, "4c_hard_fork_track_record": { "score": 16, "note": "Boojum migration (2024), PLONK to Boojum transition ongoing. Smooth execution." }, "4d_hybrid_deployment_readiness": { "score": 17, "note": "Boojum is the transition path toward hash-based proofs. No shipped hybrid signature yet; structural readiness high." } }, "total_artifacts": 2 }, "5_deployment_execution": { "weight": 0.22, "score": 22, "sub_scores": { "5a_mainnet_pqc_pct": { "score": 3, "mainnet_pqc_pct": 10, "evidence": [], "note": "Boojum's hash-based commitments are partially deployed (prover layer); user signature layer still classical. Partial credit." }, "5b_pqc_code_in_client": { "score": 6, "note": "era-boojum repo is shipped code; FRI-friendly primitives present. No ML-DSA signatures yet." }, "5c_validator_pqc_adoption": { "score": 3, "note": "Matter Labs sequencer; proving infra upgraded." }, "5d_published_milestones_count": { "score": 6, "count": 2, "note": "Milestones: (1) Boojum transition published, (2) Era v24 prover upgrade." }, "5e_pqc_washing_delta": { "score": 4, "ratio": 1.2, "note": "Moderate: Boojum framed as 'post-quantum path' but consumer claim not overstated." } }, "total_artifacts": 2 }, "6_supply_chain_vendor_readiness": { "weight": 0.2, "score": 8, "sub_scores": { "6a_wallet": { "score": 2, "top3": [ "MetaMask", "Rabby", "Safe" ], "pqc_roadmap_count": 0, "evidence": [] }, "6b_bridge": { "score": 2, "top3": [ "Canonical Era bridge", "LayerZero", "Across" ], "pqc_roadmap_count": 0, "evidence": [] }, "6c_custodian": { "score": 2, "top3": [ "Coinbase Custody", "BitGo", "Anchorage" ], "pqc_roadmap_count": 0, "evidence": [] }, "6d_rpc_hsm": { "score": 2, "top3": [ "Matter Labs RPC", "Alchemy", "QuickNode" ], "pqc_roadmap_count": 0, "evidence": [] } }, "total_artifacts": 1 }, "7_governance_coordination": { "weight": 0.05, "score": 40, "sub_scores": { "7a_validator_stake_distribution": { "score": 6, "note": "Centralized Matter Labs sequencer." }, "7b_upgrade_cadence_under_pressure": { "score": 12, "note": "Boojum transition + Era upgrades coordinated." }, "7c_named_coordination_lead": { "score": 12, "note": "Named: Alex Gluchowski, Matter Labs, zkSync Association." }, "7d_adversarial_coordination_precedent": { "score": 10, "note": "No adversarial precedent." } }, "total_artifacts": 1 } }, "gates": { "hybrid_deployment": "CONDITIONAL (Boojum prover is partially PQ-path; user sig layer classical)", "evidence_reconstruction": "PASS", "primitive_naming": "PASS" }, "caps_applied": [ "mosca_cap_60 (5a partial)", "aaronson_cap_partial (Boojum FRI components shipping)" ], "qri": { "raw": 38, "after_caps": 34, "ci_plus_minus": 6, "band": 3, "band_name": "Preparing" }, "migration_stage": 1, "mosca_inequality": { "X_signature_shelf_life_years": "3-8 (AA-rotatable)", "Y_migration_time_years_range": "2-5 (AA substrate + Boojum path)", "Z_10pct_year": 2036, "Z_50pct_year": 2041, "danger_zone_at_50pct": false }, "four_scenario_grid": { "quantum_never": { "value_preserved_pct": 100, "privacy_preserved_pct": 100 }, "arrives_suddenly_pre_migration": { "value_preserved_pct": 30, "privacy_preserved_pct": 20 }, "arrives_slowly_post_migration": { "value_preserved_pct": 75, "privacy_preserved_pct": 45 }, "arrives_slowly_mid_migration": { "value_preserved_pct": 55, "privacy_preserved_pct": 30 } }, "burn_vs_rescue_policy": "AA-rescue likely via per-account rotation; Boojum handles prover-side transition", "pqc_washing_ratio": 1.2, "vendor_tile_summary": { "wallet": { "top3": [ "MetaMask", "Rabby", "Safe" ], "pqc_roadmap_count": 0 }, "bridge": { "top3": [ "Canonical Era bridge", "LayerZero", "Across" ], "pqc_roadmap_count": 0 }, "custodian": { "top3": [ "Coinbase Custody", "BitGo", "Anchorage" ], "pqc_roadmap_count": 0 }, "rpc_hsm": { "top3": [ "Matter Labs RPC", "Alchemy", "QuickNode" ], "pqc_roadmap_count": 0 } }, "narrative_summary": "zkSync Era has above-baseline PQ posture via two structural advantages: native account abstraction (signature scheme is a contract-level choice) and the Boojum prover transition toward hash-based FRI-style commitments. User signatures remain classical ECDSA but AA enables per-account migration. Behind Starknet on proof-system PQ-readiness (Boojum transition still in progress vs. Starknet's FRI already-shipped), but ahead of most L2s.", "evaluator_notes": "Stage 1 (moving to 2 as Boojum completes). Second-strongest L2 PQ posture after Starknet. Boojum is a real PQ-path signal; FRI-friendly commitments reduce proof-layer PQ risk. AA gives migration tool.", "narrative_voiced": "zkSync Era is the only L2 where signature choice is a contract-level decision because account abstraction is native from genesis. Combine that with the Boojum prover moving toward FRI-based commitments, and the migration tool is already sitting on mainnet. Shipped, unused." }