XRP Ledger's Quantum Plan Targets 2027-2028, and Tokenized Assets Are Why It Matters
The XRP Ledger Foundation's protocol roadmap now lists quantum-resistant accounts and ML-DSA-44 as research directions for 2027 and 2028. It's a plan, not a live upgrade, and the timetable matters more than the algorithm for anyone issuing long-dated on-chain instruments.
The XRP Ledger Foundation's protocol roadmap now includes research into quantum-resistant accounts, with ML-DSA-44 named as one candidate signature scheme and work penciled in across 2027 and 2028. That's a planning signal, not a switch. No amendment has passed, no migration path is agreed, and nothing about today's XRP accounts changes this quarter.
Be precise about the threat model, because a lot of people aren't. A quantum machine that can drain wallets at scale doesn't exist. What exists is a signature scheme problem, and swapping account cryptography is never a wallet app update. It touches transaction size, verification costs, hardware support, and the safety of moving addresses that have held funds for a decade or more.
That last part is the hard bit. Public ledgers have to design for holders who never log in. Dormant balances, old signing devices, forgotten keys. A migration that assumes active users is a migration that strands everyone else.
Here's where I'll plant a flag. This matters far less for XRP's price than it does for every tokenized instrument with a decade-long maturity. Tokenization isn't a narrative. It's a rails upgrade, and rails get built to outlast the people who laid them. If you're issuing a tokenized treasury or a collateralized credit note maturing in 2040, you can't have the underlying signature scheme expire before the instrument does. Ripple's earlier work with Project Eleven on the same problem points in this direction. The real world is coming on-chain, one asset class at a time, and each of those asset classes arrives with a duration attached.
So the timetable is the story. Those 2027 and 2028 dates are targets subject to research, engineering and community governance, and targets slip or get rejected. Watch for a formal amendment, an independent security review, and custody provider support. The algorithm is the easy part. A clean migration of a decade of dormant addresses isn't.