1|2 Why do you lose everything when your phone gets hacked? Because by design, most crypto wallets keep your private key as a file in your phone's memory, so a single piece of malware can empty it. @Starknet has a fix: a quantum-resistant signature held in your phone's hardware 🧵 ______________ Every transaction you send carries a signature, which is proof that you, the owner of the key approved it. Today's chains use signatures built on elliptic curve math, and a big enough quantum computer could, in theory, work backwards from your public key to your private key, and then sign as you. Due to exploits we've experienced this year, starknet is preparing ahead for possible quantum threats. ML-DSA is the replacement. It is a design by NIST, built on Lattices, a math quantum computers are not known to break. How they did it: @StarkWareLtd sent a testnet transaction signed with ML-DSA from a phone and the key was created and held inside the phone's secure hardware, so it never sat in regular memory. Starknet then checked the signature onchain and accepted it. This was possible because on Starknet the signature check lives in each account's own code, not in the network's rules, so no fork was needed. On most chains the signature type is part of the network's own rules, so changing it means every node upgrades together, which is a hard fork. Furthermore, on Starknet, every account is a smart contract with its own signature check, so supporting ML-DSA means deploying an account whose code checks ML-DSA signatures. The network itself doesn't change, and each user can switch on their own schedule.