l2s_commentary.csv

project,ticker,tier,category,category_commentary,settlement_exposure,settlement_commentary,data_availability_exposure,data_availability_commentary,proof_exposure,proof_commentary,tx_signature_exposure,tx_signature_commentary,onchain_exposure,onchain_commentary,other_exposure,other_commentary,ec_sunset,ec_sunset_commentary,date_last_updated,audit,report
Base,BASE,,,,,,Ethereum blobs; KZG uses BLS12-381 — replacement crypto on roadmap but not yet defined,,Cannon fault proofs hash-based internally; output roots are keccak commitments; sequencer signs unsafe blocks with secp256k1,,Standard EVM ECDSA secp256k1; Base departed Superchain and does NOT inherit OP Labs PQ roadmap,,Standard EVM precompiles; no PQC verification primitive,,Withdrawal proofs are keccak Merkle-based; Coinbase-controlled bridge governance,,Base departed Superchain — no inherited PQ roadmap; no independent PQC discussions from Coinbase,,,,
Arbitrum One,ARB,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,BoLD fraud proofs: bisection is hash-based (Keccak Merkle); assertions submitted by secp256k1 EOAs,,Standard EVM ECDSA secp256k1; EIP-7702 available,,Standard EVM + Stylus WASM precompiles; no PQC primitive,,Withdrawal proofs are Merkle-based; Security Council 9-of-12 EC multisig,,No PQC discussions from Offchain Labs,,,,
Polygon CDK,POL,,,,,,Rollup mode: Ethereum blobs (inherits Ethereum rating); Validium mode: DAC with EC-signed attestations,,eSTARK inner (hash-based quantum-favorable) wrapped in FFLONK/BN254 for L1 verification — quantum-vulnerable,,ECDSA secp256k1 (EVM-inherited); no PQC tx type,,Type-2 zkEVM; standard EC precompiles; no PQC verification primitive,,AggLayer pessimistic proofs (SP1/Plonky3 STARK inner Groth16/BN254 outer); Protocol Council 7/13 EC multisig; unified LxLy bridge EC-signed,,No PQC roadmap from Polygon Labs; zkEVM sunset July 2026 is operational not PQC-motivated,,,,
OP Mainnet,OP,,,,,,Ethereum blobs; KZG uses BLS12-381 — replacement crypto on roadmap but not yet defined,,Cannon fault proofs hash-based internally; sequencer signs unsafe blocks with secp256k1,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles; no PQC verification primitive,,Security Council 2-of-2 multisig is EC; Guardian role is EC,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
StarkNet,STRK,,,,,,Ethereum blobs; Volition off-chain DA available,,Stwo prover (Circle STARKs over M31): hash-based and quantum-resistant; Pedersen legacy persists in storage addressing only,,Default ECDSA on Stark curve (quantum-vulnerable); native AA enables PQC — Falcon-512 live on mainnet via community (s2morrow),,Cairo VM has EC builtins; Falcon-512 verification demonstrated in pure Cairo (~9.5M gas),,StarkGate bridge admin keys are EC; Pedersen-to-Poseidon migration positive,,StarkWare stance: STARK proofs safe; sigs fixable via AA when needed — no formal EC removal plan,,,,
Mantle,MNT,,,,,,MantleDA (EigenDA) uses BLS12-381 aggregated operator attestations — quantum-vulnerable; not on Ethereum blobs,,OP Stack Cannon fault proofs,,Standard EVM ECDSA secp256k1,,Standard EVM precompiles,,EigenDA BLS12-381 attestations are an independent quantum vulnerability,,No PQC discussions; non-Superchain fork — won't auto-receive upstream PQC improvements,,,,
Ink,INK,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Cannon fault proofs,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles,,,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
MegaETH,MEGA,,,,,,EigenDA uses BLS12-381 aggregated signatures — quantum-vulnerable; not on Ethereum blobs,,OP Kailua ZK fault proofs (RISC Zero): STARK inner but BN254 L1 verification,,Standard EVM ECDSA secp256k1,,Standard EVM precompiles; no PQC verification,,EigenDA BLS12-381 attestations; OP Stack bridge,,No PQC discussions,,,,
X Layer,OKB,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Polygon CDK zkEVM: eSTARK inner wrapped in FFLONK/BN254 for L1,,ECDSA secp256k1; EVM-equivalent,,Standard EVM precompiles; no PQC verification,,AggLayer pessimistic proof (BN254 SNARK); centralized sequencer EC keys,,No PQC discussions from OKX or Polygon,,,,
Stacks,STX,,,Bitcoin L2 (PoX),,,Bitcoin PoX anchor blocks hash-based; Stacks-layer DA uses WSTS Schnorr/secp256k1 block attestations,,No ZK/fraud proofs; block validity via WSTS Schnorr threshold sigs over secp256k1,,secp256k1 ECDSA and Schnorr; no PQC alternative,,Clarity VM: secp256k1-verify/recover builtins; SIP-033 adds secp256r1 (expanding EC surface),,sBTC peg uses WSTS Taproot UTXO — catastrophic quantum risk; entire locked BTC at stake,,No PQC discussions found in SIPs or governance,,,,
World Chain,WLD,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Cannon fault proofs; same as OP Stack,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles,,World ID uses Groth16/BN254 at application layer (not chain-level),,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
Blast,BLAST,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Cannon fault proofs,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles,,Native yield is application-layer; no new crypto surface,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
Linea,LINEA,,,,,,Ethereum blobs with compression,,Vortex prover: lattice-based inner proofs (Ring-SIS) but final L1 proof is PLONK/BN254,,ECDSA secp256k1; Type-2 zkEVM,,Standard EVM precompiles; no PQC verification,,Bridge depends on SNARK verification; ConsenSys controls instant upgrades,,ConsenSys has done lattice-based SNARK research but no EC sunset plan,,,,
Unichain,UNI,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Cannon fault proofs,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles,,,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
Etherlink,XTZ,,,,,,Tezos L1 inbox; Tezos consensus uses BLS12-381 — ML-DSA-44 is for tx sigs not DA,,WASM PVM refutation game; bisection hash-based but operator assertions EC-signed,,EVM secp256k1 (Etherlink is EVM-compatible); Tezos L1 has tz5/ML-DSA-44 on testnet,,Standard EVM precompiles; WASM kernel can implement arbitrary logic,,FA bridge (Tezos ticket mechanism),,Tezos L1 has tz5/ML-DSA-44 proposal but no EC retirement plan for Etherlink EVM layer,,,,
zkSync Era,ZK,,,,,,Ethereum blobs; Validium mode available but not used on Era,,Boojum: STARK/FRI inner prover (Goldilocks) wrapped in KZG/BN254 for L1 verification,,ECDSA secp256k1; native AA doesn't add PQC,,EVM-equivalent; standard EC precompiles,,Shared bridge EC-signed; ZK Nation Security Council EC multisig,,No PQC discussions from Matter Labs,,,,
Immutable X,IMX,,,,,,Validium with 5-of-7 DAC; ECDSA secp256k1 attestations; all committee keys on-chain as permanent harvest targets,,Pure STARK (FRI via Stone prover through SHARP); no SNARK wrapper; same L1 verifier as StarkNet — zero EC precompile calls,,ECDSA on Stark curve (L2) + secp256k1 (L1); no account abstraction — no PQC migration path,,N/A — StarkEx is fixed-function engine; no general smart contract capability,,Bridge admin keys EC; SHARP operator key EC; forced withdrawal uses L1 EC sigs; system archived March 2026,,No EC removal plan; system archived — no further development expected,,,,
Scroll,SCR,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Post-Euclid: OpenVM STARK inner prover (FRI/BabyBear) wrapped in Halo2/KZG over BN254 for L1,,ECDSA secp256k1; Type-2 zkEVM,,Standard EVM precompiles; no PQC verification,,Bridge finality depends on BN254 proof verification; Security Council 9-of-12 EC multisig,,No PQC discussions from Scroll team,,,,
Abstract,ABS,,,,,,Ethereum blobs; inherits ZK Stack DA,,Boojum prover; same as zkSync Era,,ECDSA secp256k1; native AA,,Standard ZK Stack precompiles,,,,No PQC discussions,,,,
Soneium,SONEIUM,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Cannon fault proofs,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles,,,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
Taiko,TKO,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,SP1 + RISC Zero: STARK inner provers wrapped to Groth16/BN254 for L1; SGX attestation uses EC,,ECDSA secp256k1; Type-1 zkEVM,,Standard EVM precompiles; no PQC verification,,Signal-based bridge; SGX TEE is EC-reliant,,No PQC discussions from Taiko Labs,,,,
Metis,METIS,,,,,,Ethereum blobs since May 2025 (previously MemoLabs off-chain DA),,Optimistic fraud proofs; sequencer assertions EC-signed,,ECDSA secp256k1; EVM-compatible,,Standard EVM precompiles,,Decentralized sequencer pool uses EC-signed blocks,,No PQC discussions from MetisDAO,,,,
Arbitrum Nova,NOVA,,,AnyTrust DAC deployment,,,AnyTrust DAC uses BLS12-381 aggregated signatures (6 members 5-of-6); on-chain pubkeys are permanent harvest targets,,BoLD fraud proofs; same as Arbitrum One,,Standard EVM ECDSA secp256k1,,Standard EVM + Stylus WASM precompiles,,AnyTrust DAC BLS12-381 keys — a CRQC could forge certificates and break DA guarantees,,No PQC discussions,,,,
Zora,ZORA,,,,,,Ethereum blobs; KZG BLS12-381 replacement on roadmap,,Cannon fault proofs; same as OP Stack,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles; no PQC verification,,Bridge output roots and Security Council multisig all EC,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,
Aztec,AZTEC,,,Privacy L2,,,Ethereum blobs inherit Ethereum DA rating,,Honk proving system over BN254 EC pairings — quantum-vulnerable end-to-end; no STARK component,,Schnorr on Grumpkin curve (BN254 cycle partner),,Noir/ACIR compiled to BN254 circuits; EC builtins; no PQC verification primitive,,CRITICAL: quantum breaks on SNARK privacy are retroactive — entire historical ledger deanonymized,,No PQC roadmap; entire stack depends on BN254/Grumpkin EC,,,,
Derive,DRV,,,,,,Celestia DA with Ed25519 consensus sigs; Blobstream bridge not verified on-chain — downgrade from OP Stack default,,Cannon fault proofs; same as OP Stack,,Inherits OP Stack PQ roadmap: 10-year ECDSA deprecation (by Jan 2036) via EIP-7702 smart wallet migration,,Standard EVM precompiles; no PQC verification,,Bridge output roots and 4/13 governance multisig all EC,,Inherits OP Stack PQ roadmap: ECDSA EOA deprecation by Jan 2036; covers tx sigs only,,,,