SCROLL · rollup-L2 · QRI 10 · BAND 1 Unaware Hybrid FAIL · Stage 0 · Washing 1x

Scroll is sitting on an unexercised option: Halo2 has a FRI backend that is hash-based and plausibly PQ-safe, but Scroll runs the KZG variant that Shor breaks. The migration path is already in the library. Nobody has announced pulling the lever. February 2026's emergency upgrade proved they could.

inLinkedIn XPost ▼Scorecard JSON ⇆Compare Verified 2026-04-18

Summary

Scroll is Band 1 (Unaware). Halo2-KZG zkEVM proofs rely on pairing-based SNARK assumptions that Shor breaks. Halo2 has a FRI variant (hash-based, plausibly PQ-safe) which Scroll could adopt — notable latent migration path. No PQC work announced. Feb 2026 emergency upgrade proved fast coordination.

What the gates say

Hybrid: FAIL. No hybrid plan on file.
Evidence: PASS. Sources reconstructable by third party.
Primitive naming: PASS. Named primitives at every scored sub-level.

Burn-vs-rescue policy on file

undeclared

Seven dimensions

Each dimension scores 0-100 internally; the weighted roll-up produces the QRI on the left. Open a row to read the sub-score detail.

1 Cryptographic Exposure 32 / 100

1a_primitive_inventory 12 / 20

Primitives: ECDSA secp256k1 · Keccak-256 · Halo2 (PLONK-ish, FRI/KZG) · BN254 (L1 verifier)

Evidence: Scroll docs

1b_shor_grover_pq_tag 14 / 20

Halo2 with FRI backend is hash-based and plausibly PQ-safe — Scroll uses KZG backend.

1c_algorithm_family_diversity 0 / 20

1d_nist_security_category 0 / 20

1e_implementation_quality 6 / 20

Evidence: github.com

2 HNDL Exposure 22 / 100

2a_active_key 4 / 20

EVM EOA exposure.

2b_cold_key 4 / 20

Same.

2c_sig_long_term 7 / 20

Tx-once.

2d_encryption_conf 7 / 20

Standard.

3 Metadata & Privacy Exposure 22 / 100

3a_graph_visibility 5 / 20

Transparent.

3b_rpc_concentration 6 / 20

Scroll-hosted RPC + Alchemy/Infura.

3c_bridge_correlation 6 / 20

Native bridge.

3d_retroactive_deanon 5 / 20

Halo2-KZG proofs retroactively challengeable by Shor.

4 Migration Architecture 28 / 100

4a_crypto_agility 8 / 20

Scroll stack can in theory swap Halo2-KZG for Halo2-FRI (hash-based). No announced plan.

4b_aa_key_rotation 10 / 20

ERC-4337 AA inherited.

4c_hard_fork_track_record 7 / 20

Emergency upgrade Feb 2026 executed within hours. Demonstrates responsiveness.

4d_hybrid_deployment_readiness 3 / 20

Not architected.

5 Deployment Execution 1 / 100

5a_mainnet_pqc_pct 0 / 20

5b_pqc_code_in_consensus 0 / 20

5c_validator_pqc_keys 0 / 20

5d_published_milestones 0 / 20

5e_pqc_washing_delta 1 / 20

6 Supply Chain Vendor Readiness 5 / 100

6a_wallet 2 / 20

6b_bridge 1 / 20

6c_custodian 1 / 20

6d_rpc_hsm 1 / 20

7 Governance & Coordination 38 / 100

7a_validator_stake_distribution 5 / 20

Centralized sequencer.

7b_upgrade_cadence_under_pressure 15 / 20

Feb 2026 emergency upgrade within hours.

7c_named_coordination_lead 10 / 20

Scroll Foundation + DAO (nascent).

7d_adversarial_coordination_precedent 8 / 20

Feb 2026 emergency upgrade counts.

The X + Y vs Z inequality

X (data shelf life): 5-10

Y (migration time): 8-12

Z10 (10% CRQC year): 2036 · Z50 (50%): 2041

Verdict: X+Y > Z (danger).

Four-scenario grid

Scenario	Value preserved	Privacy preserved
quantum never	100%	100%
arrives suddenly pre migration	5%	15%
arrives slowly post migration	80%	75%
arrives slowly mid migration	30%	35%

Peers in the rollup-L2 profile

Order-book view of the 9 chains closest to Scroll by QRI.

Public artifacts used for this scorecard

Each entry below is a sub-score citation. Clicking the link takes you to the public source. A third party should be able to reconstruct every number on this page from these URLs in 48 hours.

Cryptographic Exposure · 1a_primitive_inventory

Scroll docs

Cryptographic Exposure · 1e_implementation_quality

https://github.com/scroll-tech/zkevm-circuits

Supply chain snapshot

wallet MetaMask · Rabby · Coinbase Wallet 0 PQC roadmaps

bridge Scroll Bridge · LayerZero · Across 0 PQC roadmaps

custodian Coinbase Custody · Fireblocks · BitGo 0 PQC roadmaps

rpc_hsm Alchemy · Infura · QuickNode 0 PQC roadmaps

A chain's supply chain cannot migrate faster than its slowest dependency. Zero PQC roadmaps in any of the four categories is a structural blocker, not a lagging indicator.

Analyst notes on the scoring

Halo2-FRI option is a structural PQ-positive that differentiates Scroll from KZG-only L2s — but not exercised. No PQC roadmap.

Scorecard metadata

Profile: rollup-L2
Scored: 2026-04-18 by layerqu-v2-scoring-agent-4
v1 reference: chainscreen-v1-archive
QRI raw: 12 · after caps: 10
Confidence interval: ±15
PQC washing ratio: 1x
Burn-vs-rescue: undeclared

Caps triggered

Mosca (5a<20%)
Sutor (5d=0 → Stage max 2)
Preskill (<3 artifacts several dims → ×0.5)
Casado (4 tiles pqc=0 → migration_stage max 3)
Hybrid gate FAIL → QRI cap 60