Researchers from four U.S. universities have built the first complete post-quantum security design for the Bitcoin Lightning Network, adding NIST-standardized quantum-resistant cryptography to the system's communications and payment requests. The team, led by Dr. Ahmet Kurt, an assistant professor at East Texas A&M University's Department of Computer Science and Information Systems, announced the solution on Tuesday, September 22, 2026. The work matters because Lightning's off-chain channels rely on cryptography that powerful quantum computers could eventually break — even if Bitcoin's mainnet gets upgraded first.
What the team actually built
The implementation runs in Rust-Lightning, the Rust-based Lightning library. It uses ML-DSA for digital signatures and ML-KEM for key exchange, both post-quantum algorithms standardized by NIST. Rather than replacing the existing classical cryptography, the team layered the new algorithms on top in a hybrid design. That means an attacker would need to break both the post-quantum and classical layers to compromise a connection or forge a payment request. The project isn't a proof of concept — it's a working implementation that took roughly three to four months and about 11,000 lines of code.
Why Lightning needs its own quantum plan
Bitcoin's mainnet gets most of the attention when quantum computing comes up. But Lightning handles fast, cheap payments through off-chain channels, and those channels have their own cryptographic stack. Even if Bitcoin itself is upgraded to resist quantum attacks, Lightning's off-chain systems could remain exposed. This project shows that Lightning's infrastructure can start preparing independently, without waiting on mainnet solutions to land first. Quantum researchers have warned for a while that Bitcoin's software will need upgrades to handle quantum computing, and some developers and firms — including Blockstream — have already started developing their own fixes.
The group behind the code
The work involved researchers from East Texas A&M University, North American University, Florida Gulf Coast University, and Florida Institute of Technology. Kurt led the effort. Bitcoin Magazine tweeted about the announcement on September 22, which is how the news reached a wider audience. There's no word on whether the code has been submitted to the Rust-Lightning repository or if it will be reviewed for inclusion in a future release. The team hasn't published a timeline for deployment or third-party auditing.
The obvious next step is outside review. A hybrid post-quantum design is only as good as the audits behind it, and none have been announced. The other open question is whether Lightning implementations beyond Rust-Lightning — like the C-lightning or LDK variants — will adopt similar work, or whether this stays a research contribution. For now, the code exists and the design is public. Whether it becomes part of Bitcoin's quantum defense or remains an academic exercise depends on what the team does with it next.
