The company described the quantum threat as now "credible" in a post published this week on Ripple Insights, authored by Ayo Akinyele.

The roadmap targets full deployment of post-quantum cryptography on the XRP Ledger (XRPL) by no later than 2028, with testnet milestones scheduled for the first half of 2026. A prototype implementation has been running on XRPL's AlphaNet developer testnet since December 2025.

---

What the Threat Actually Is

Most major blockchains, including Bitcoin, Ethereum, and currently XRPL itself, rely on elliptic curve cryptography (ECC) to secure private keys. ECC is considered robust against conventional computers, but a sufficiently powerful quantum computer running an algorithm called Shor's algorithm could theoretically derive a private key from a publicly visible public key, enabling unauthorized access to funds.

The urgency increased after Google Quantum AI researchers Ryan Babbush and Hartmut Neven published findings on March 31, 2026 showing that breaking the specific elliptic curve standard used by most blockchains would now require fewer than 500,000 physical qubits. That figure represents roughly a 20-fold reduction from prior estimates. According to the Google Research Blog, the researchers also estimated that execution could occur in a few minutes on a superconducting qubit system.

Google disclosed the findings in coordination with Coinbase, the Stanford Institute for Blockchain Research, and the Ethereum Foundation, and has set its own internal migration target at 2029.

Every time a user signs a blockchain transaction, their public key is briefly exposed on-chain. For accounts that have already transacted, that public key is permanently recorded. This creates what researchers call a "harvest now, decrypt later" risk: adversaries can collect public keys today and attempt to crack them once quantum hardware matures.

---

Ripple's Four-Phase Plan

The roadmap assigns each phase a distinct function. Phase 1 introduces an emergency recovery mechanism using post-quantum zero-knowledge proofs, allowing users to prove ownership of existing keys without exposing them during a migration, even if the underlying cryptography has been compromised. Phase 2 involves risk assessment and testing of algorithms standardized by the U.S. National Institute of Standards and Technology (NIST), in collaboration with external partner Project Eleven. Phase 3 tests post-quantum signature schemes alongside existing methods on XRPL's Devnet.

Phase 4 deploys the full upgrade to production through a protocol amendment.

The algorithm Ripple has selected is CRYSTALS-Dilithium, which NIST has formally standardized under the name ML-DSA. It is a lattice-based algorithm, meaning its security relies on mathematical problems that quantum computers are not expected to solve efficiently. The trade-off is size: ML-DSA signatures on XRPL's AlphaNet measure 2,420 bytes each, substantially larger than equivalent ECC signatures, which increases storage and bandwidth requirements. The December 2025 AlphaNet implementation covers three components: Quantum Accounts, Quantum Transactions, and Quantum Consensus, demonstrating the breadth of the upgrade already under way.

---

How XRPL Compares to Competitors

Ripple argues that XRPL holds a structural advantage over Ethereum and Bitcoin through a feature called native key rotation. On XRPL, users can replace a compromised signing key with a quantum-resistant one without moving funds to a new account address. Ethereum has no direct protocol equivalent for seamless in-place key rotation, though the Ethereum Foundation launched a dedicated post-quantum program in January 2026, including a new site at pq.ethereum.org and weekly post-quantum interoperability devnets with more than 10 client teams participating. Ethereum users who wish to migrate must either manually transfer assets to a new address or adopt smart wallet abstractions.

An independent audit published in April 2026 by XRPL validator Vet confirmed the key-rotation advantage. Vet wrote that XRPL "is account based and allows for signing key rotation" without requiring users to move funds.

Bitcoin's exposure is considerably more acute. Roughly 6.9 million BTC, approximately 35% of circulating supply, sits in wallet formats where public keys are permanently exposed, including early P2PK-format addresses and the estimated 1 million BTC attributed to Satoshi Nakamoto.

Bitcoin users must move funds to protected address formats before quantum hardware matures, and even that migration window carries a roughly 10-minute exposure period during the mempool window.

XRPL's current profile is more contained. An April 2026 audit found that roughly 0.03% of circulating XRP supply sits in accounts that have never transacted and have not yet exposed their public keys, including two dormant whale accounts that together hold approximately 21 million XRP. As XRPL adoption deepens, more accounts will transact and expose their public keys over time, steadily increasing the network's overall quantum exposure baseline.

---

What This Means for Africa

For users in Nigeria, Kenya, India, and South Africa, the implications are practical rather than abstract. Africa processed over $205 billion in on-chain value in the year to June 2025, up 52% year on year. Nigeria alone accounted for $92 billion of that volume. Ripple has active partnerships across the continent, including with Chipper Cash, Yellow Card, and VALR for RLUSD stablecoin distribution, and with Absa Bank for custody services. XRPL is increasingly embedded in regional payment and remittance infrastructure rather than used purely for speculation.

For institutions in these markets pursuing regulatory licensing as Virtual Asset Service Providers, demonstrating a credible long-term cryptographic security posture is likely to become a compliance requirement. Ripple's named milestones and a fixed 2028 completion target offer a clearer institutional narrative than either Ethereum (core L1 upgrades expected no earlier than 2029) or Bitcoin, where no coordinated migration roadmap has been published, currently provide.

XRP traded at $1.43 at the time of publication, up roughly 7% over the prior week. Grayscale reaffirmed XRP's progress in addressing the quantum threat in an April 7, 2026 report, describing Ripple's approach as substantive relative to peers.

The near-term test will be whether XRPL's mainnet upgrade from developer testnet to production follows the announced schedule. Google's 2029 internal migration target is the relevant benchmark: if Google estimates its own quantum systems will reach that capability by 2029, Ripple's 2028 mainnet target provides only a one-year buffer, leaving limited margin for delay.