Quantum computers won't announce the day they can forge a signature. On the latest episode of The Post-Quantum Experience we covered why. Break encryption and the consequences become public. Forge a signature and the only symptom is a wallet drained. Nobody can tell if it was a quantum break, a standard break or a stolen key. "Web3 is mostly a signature problem." Where that leaves anyone planning for bunker mode: → An address that has never signed has never revealed its public key → The first signed transaction reveals it, and the funds have to move again → Hiding buys time. The signature scheme is what has to change On NaoX: ✅ Validator keys have been ML-DSA-87 since genesis, the signature scheme @NIST standardised as FIPS 204. The registry refuses any other key size ✅ Hybrid transactions carry two signatures over one payload and both must pass. Accounts can move classical to hybrid to post-quantum only, forward-only, with no hard fork ✅ Mainnet is operating in its initial phase: validator onboarding is underway and developer access opens next Finality aggregation is still classical BLS12-381 today. As we've been saying all year, 2026 is when the migration begins, and signatures are the first thing that has to move. The Great Quantum Awakening Continues.