{
  "chain_slug": "cosmos",
  "name": "Cosmos Hub",
  "scorecard_profile": "L1",
  "evaluated_at": "2026-04-18",
  "evaluator": "layerqu-v2-scoring-agent-2",
  "v1_reference": "chainscreen-v1-archive",
  "dimensions": {
    "1_cryptographic_exposure": {
      "weight": 0.15,
      "score": 22,
      "sub_scores": {
        "1a_primitive_inventory": {
          "score": 11,
          "primitives_named": [
            "Ed25519 (CometBFT validator signatures)",
            "secp256k1 (account signatures)",
            "SHA-256 (hashing)"
          ],
          "evidence": [
            "https://docs.cometbft.com/",
            "https://github.com/cometbft/cometbft"
          ],
          "note": "Inventory clear from Cosmos SDK/CometBFT docs."
        },
        "1b_shor_grover_pq_tag": {
          "score": 8,
          "tags": {
            "Ed25519": "Shor-break",
            "secp256k1": "Shor-break",
            "SHA-256": "Grover-weaken-128bit"
          },
          "evidence": []
        },
        "1c_algorithm_family_diversity": {
          "score": 0,
          "families_represented": 0,
          "families": [],
          "note": "No PQC."
        },
        "1d_nist_security_category": {
          "score": 3,
          "mappings": {
            "Ed25519": "128-bit classical (0-bit PQ)"
          },
          "evidence": []
        },
        "1e_implementation_quality": {
          "score": 0,
          "formal_verification": "CometBFT consensus formally analyzed; crypto libraries standard",
          "constant_time": "standard",
          "libraries": [
            "CometBFT",
            "Cosmos SDK"
          ],
          "evidence": []
        }
      },
      "total_artifacts": 2
    },
    "2_hndl_exposure": {
      "weight": 0.1,
      "score": 18,
      "sub_scores": {
        "2a_active_key_exposure": {
          "score": 4,
          "note": "cosmos1... addresses derived from secp256k1 pubkey hash; pubkey exposed on first tx. Similar to Ethereum EOA pattern."
        },
        "2b_cold_key_exposure": {
          "score": 4,
          "note": "66 months mainnet; significant exposed cold supply."
        },
        "2c_signature_longterm_validity": {
          "score": 5,
          "note": "All historical sigs Shor-breakable; IBC relay sigs also."
        },
        "2d_encryption_confidentiality": {
          "score": 5,
          "note": "Standard TLS; no PQC in p2p."
        }
      },
      "total_artifacts": 1
    },
    "3_metadata_privacy_exposure": {
      "weight": 0.13,
      "score": 20,
      "sub_scores": {
        "3a_tx_graph_visibility": {
          "score": 5,
          "note": "Transparent; IBC cross-chain makes linkable."
        },
        "3b_rpc_mempool_concentration": {
          "score": 5,
          "note": "Public Osmosis, Keplr, Strangelove endpoints."
        },
        "3c_cross_chain_bridge_correlation": {
          "score": 5,
          "note": "IBC + Gravity Bridge + Skip Protocol heavy correlation."
        },
        "3d_retroactive_deanon_risk": {
          "score": 5,
          "note": "No ZK on Cosmos Hub; minimal retroactive deanon."
        }
      },
      "total_artifacts": 1
    },
    "4_migration_architecture": {
      "weight": 0.1,
      "score": 38,
      "sub_scores": {
        "4a_crypto_agility": {
          "score": 12,
          "note": "Cosmos SDK modular; CometBFT signature scheme pluggable in principle. Interchain Security v2 live."
        },
        "4b_account_abstraction_key_rotation": {
          "score": 8,
          "note": "authz/feegrant modules support delegation; no native AA but some key abstraction."
        },
        "4c_hard_fork_track_record": {
          "score": 10,
          "note": "Coordinated upgrades smooth (v10, v11, v12). IBC adoption strong."
        },
        "4d_hybrid_deployment_readiness": {
          "score": 8,
          "note": "DoraFactory cosmos-pqc external research exists; no mainnet hybrid path."
        }
      },
      "total_artifacts": 2
    },
    "5_deployment_execution": {
      "weight": 0.22,
      "score": 4,
      "sub_scores": {
        "5a_mainnet_pqc_pct": {
          "score": 0,
          "mainnet_pqc_pct": 0,
          "evidence": [],
          "note": "Zero. Mosca cap."
        },
        "5b_pqc_code_in_client": {
          "score": 1,
          "note": "DoraFactory cosmos-pqc external fork; not in CometBFT main branch."
        },
        "5c_validator_pqc_adoption": {
          "score": 0,
          "note": "All ~180 validators on Ed25519."
        },
        "5d_published_milestones_count": {
          "score": 1,
          "count": 1,
          "note": "DoraFactory cosmos-pqc research only."
        },
        "5e_pqc_washing_delta": {
          "score": 2,
          "ratio": 1,
          "note": "Low announcement volume."
        }
      },
      "total_artifacts": 1
    },
    "6_supply_chain_vendor_readiness": {
      "weight": 0.22,
      "score": 4,
      "sub_scores": {
        "6a_wallet": {
          "score": 1,
          "top3": [
            "Keplr",
            "Leap",
            "Ledger HW"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6b_bridge": {
          "score": 1,
          "top3": [
            "IBC",
            "Gravity Bridge",
            "Axelar"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6c_custodian": {
          "score": 1,
          "top3": [
            "Coinbase Custody",
            "BitGo",
            "Anchorage"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        },
        "6d_rpc_hsm": {
          "score": 1,
          "top3": [
            "Strangelove",
            "Polkachu",
            "Imperator"
          ],
          "pqc_roadmap_count": 0,
          "evidence": []
        }
      },
      "total_artifacts": 1
    },
    "7_governance_coordination": {
      "weight": 0.08,
      "score": 52,
      "sub_scores": {
        "7a_validator_stake_distribution": {
          "score": 12,
          "note": "~180 validators; top 10 control majority (moderate Nakamoto)."
        },
        "7b_upgrade_cadence_under_pressure": {
          "score": 14,
          "note": "Consistent upgrades via governance."
        },
        "7c_named_coordination_lead": {
          "score": 14,
          "note": "Named: Informal Systems, Strangelove, Interchain Foundation. No named PQC lead."
        },
        "7d_adversarial_coordination_precedent": {
          "score": 12,
          "note": "ATOM 2.0 proposal rejection showed active governance. Coordination feasible but contentious."
        }
      },
      "total_artifacts": 2
    }
  },
  "gates": {
    "hybrid_deployment": "FAIL",
    "evidence_reconstruction": "PASS",
    "primitive_naming": "PASS"
  },
  "caps_applied": [
    "mosca_cap_60 (5a=0)",
    "sutor_cap_50 (5d=1)",
    "casado_cap (all vendors 0 PQC roadmaps)"
  ],
  "qri": {
    "raw": 14,
    "after_caps": 14,
    "ci_plus_minus": 6,
    "band": 1,
    "band_name": "Acknowledged"
  },
  "migration_stage": 0,
  "mosca_inequality": {
    "X_signature_shelf_life_years": "5-15",
    "Y_migration_time_years_range": "5-10 (SDK upgrade + validator coordination)",
    "Z_10pct_year": 2036,
    "Z_50pct_year": 2041,
    "danger_zone_at_50pct": true
  },
  "four_scenario_grid": {
    "quantum_never": {
      "value_preserved_pct": 100,
      "privacy_preserved_pct": 100
    },
    "arrives_suddenly_pre_migration": {
      "value_preserved_pct": 10,
      "privacy_preserved_pct": 5
    },
    "arrives_slowly_post_migration": {
      "value_preserved_pct": 55,
      "privacy_preserved_pct": 30
    },
    "arrives_slowly_mid_migration": {
      "value_preserved_pct": 30,
      "privacy_preserved_pct": 15
    }
  },
  "burn_vs_rescue_policy": "undeclared",
  "pqc_washing_ratio": 1,
  "vendor_tile_summary": {
    "wallet": {
      "top3": [
        "Keplr",
        "Leap",
        "Ledger HW"
      ],
      "pqc_roadmap_count": 0
    },
    "bridge": {
      "top3": [
        "IBC",
        "Gravity Bridge",
        "Axelar"
      ],
      "pqc_roadmap_count": 0
    },
    "custodian": {
      "top3": [
        "Coinbase Custody",
        "BitGo",
        "Anchorage"
      ],
      "pqc_roadmap_count": 0
    },
    "rpc_hsm": {
      "top3": [
        "Strangelove",
        "Polkachu",
        "Imperator"
      ],
      "pqc_roadmap_count": 0
    }
  },
  "narrative_summary": "Cosmos Hub (ATOM) runs CometBFT with Ed25519 validator sigs and secp256k1 account sigs. Zero PQC on mainnet, zero PQC in CometBFT main branch. DoraFactory's cosmos-pqc external research fork is the only PQC code in the ecosystem. ATOM 2.0 governance rejection shows coordination difficulty. Hybrid gate fails.",
  "evaluator_notes": "Hub of IBC economy (~40+ app-chains inherit this crypto posture). Migration of Cosmos Hub alone would not migrate the appchain ecosystem. Classic Stage 0/1.",
  "narrative_voiced": "Cosmos Hub sits above ~40 IBC app-chains on Ed25519 and secp256k1, and the only PQC code in the ecosystem is DoraFactory's external cosmos-pqc fork. Upgrading the Hub alone changes nothing downstream. ATOM 2.0's rejection already showed that coordination is the actual bottleneck."
}