Sui is a top-tier Move-based L1 with sub-second finality and passkey login support. It uses Ed25519, secp256k1, and secp256r1 — three distinct elliptic curve groups, all solvable by Shor's algorithm. BMIC implements NIST FIPS 203/204/205. Here's the full breakdown.
| Feature | BMIC | Sui (SUI) |
|---|---|---|
| Signature Schemes | ML-DSA (FIPS 204) + SLH-DSA (FIPS 205) Quantum Safe | Ed25519 + secp256k1 + secp256r1 + multi-sig 3 Shor-Vulnerable Curves |
| NIST PQC Standards | FIPS 203 + FIPS 204 + FIPS 205 Fully Compliant | None implemented No PQC Roadmap |
| Harvest-Now-Decrypt-Later | Mitigated — FIPS 204 + ERC-4337 key hiding Protected | All 3 curve types harvestable from tx history Critical Risk |
| Consensus Security | PQC-signed consensus Quantum Resistant | Mysticeti DAG-BFT: Ed25519 validator keys on-chain 67%+ = finality forgery |
| Passkey / WebAuthn Risk | ERC-4337; no WebAuthn EC dependency Not Affected | secp256r1 passkeys; hardware enclave bypassed by CRQC Hardware Security Bypassed |
| Smart Contract Admin Keys | PQC-protected Protected | Move module publisher keys on-chain Silent Upgrade Risk |
| Blockchain Standard | ERC-4337 account abstraction Smart Account | Move VM (object-centric) High-Performance L1 |
| Token Supply | 1.5B fixed | 10B max (inflationary staking rewards) |
| Team Allocation | 3% (lowest in sector) Investor-First | ~20% (Mysten Labs + early VCs) Standard VC |
| Presale Price | $0.049999 active now Buy Now | Liquid market token (launched May 2023) |
| Media Coverage | 186+ verified features | Extensive tier-1 coverage |
| TGE | Q2 2026 Presale Active | Live since May 2023 |
Sui is a Layer 1 blockchain built by Mysten Labs — former Meta/Diem engineers including Evan Cheng and Sam Blackshear. Mainnet launched May 2023; it has grown to a top-15 asset by market cap. Core innovations: object-centric Move VM, Mysticeti DAG-BFT consensus (sub-second finality), and multi-scheme signature support.
Sui's signature architecture is distinctive: rather than a single scheme, it supports Ed25519 (Curve25519), secp256k1, secp256r1 (NIST P-256), and multi-signature combinations. secp256r1 was added specifically to support WebAuthn/passkey authentication — enabling hardware-biometric wallet logins. This flexibility was engineered for UX; the quantum security implication is a broader attack surface.
All three underlying signature schemes rely on the elliptic curve discrete logarithm problem (ECDLP) — solvable by Shor's algorithm on a cryptographically relevant quantum computer (CRQC). Sui has published no NIST FIPS 203/204/205 migration roadmap as of October 2026.
Shor's algorithm solves the ECDLP on Curve25519 (Ed25519, ~252-qubit estimate), secp256k1 (~512-qubit), and P-256 / secp256r1 (~521-qubit). A CRQC attacks the lowest-qubit surface first — likely Curve25519 — then scales to the others as qubit counts increase. Supporting three signature schemes multiplies the HNDL archive surface without providing quantum protection for any of them.
Every Sui transaction publishes the sender public key on-chain — Ed25519, secp256k1, or secp256r1. Three-scheme support means three overlapping HNDL archive categories. Object-centric transfers publish keys at high frequency. All published keys are permanent and irremovable from chain history.
Mysticeti DAG-BFT validators sign certificate rounds with Ed25519 keys registered on-chain. CRQC recovery of 33%+ stake halts liveness; 67%+ enables full consensus forgery. Sui's sub-second finality means forged blocks become canonical and irreversible within milliseconds.
Sui added secp256r1 for WebAuthn passkey logins via Apple Secure Enclave, Android StrongBox, and FIDO2 tokens. The private key never leaves the hardware enclave — but CRQC attacks the on-chain public key directly, bypassing the enclave entirely. Hardware security is irrelevant when the elliptic curve math is broken.
Top Sui DeFi protocols (Cetus, Navi, DeepBook, Aftermath) publish upgrade authority keys on-chain from first deployment. CRQC recovery enables silent malicious package upgrades — redirecting user funds with valid-appearing signatures. Sub-second finality makes such attacks irreversible before operators can respond.
Sui's gas-station model lets sponsor accounts pay fees for users. High-volume sponsors sign thousands of transactions — their public keys appear on-chain with disproportionate frequency, creating dense HNDL profiles. Compromising a widely-used gas sponsor has systemic dApp impact.
Mysten Labs and early investors hold concentrated SUI positions in low-churn wallets on-chain from genesis. Long-lived, high-value wallets are the highest-priority CRQC targets after validators — maximum recovery value per qubit-hour. The Sui Foundation treasury is permanently harvestable now.
NIST finalised three post-quantum cryptography standards in August 2024 after an 8-year global evaluation:
ERC-4337 + PQC = HNDL Elimination: BMIC's account abstraction architecture enables signature-hiding smart accounts — the signing key is not revealed on-chain with every transaction. Combined with NIST FIPS 204/205 lattice/hash-based signatures, this eliminates the HNDL attack surface that affects Sui's three elliptic curve schemes.
This analysis focuses on quantum security. Sui has real technical achievements that warrant fair acknowledgment:
The quantum security gap is architectural — not a criticism of Sui's performance, UX, or ecosystem quality. The investor question: which architecture is more durable over a 5–10 year horizon as CRQC timelines compress? BMIC is purpose-built for quantum-safe value storage; Sui is optimised for high-performance dApps. DYOR.
NIST FIPS 203/204/205 · ERC-4337 account abstraction · 1.5B fixed supply · 3% team allocation · $530K+ raised · 186+ media features · TGE Q2 2026. DYOR.
Buy BMIC at bmic.ai →