MAINNET LIVE // SOLANA × $QSAFE
◈POST-QUANTUM VAULT : SHA-256 SHIELD ARMED◈
00:12:00 // VAULTREADY
SOLANA

QUANTUMSAFE

◈ ◈ ◈RFC 8554 LM-OTS · 34-HASH CUSTODY◈ ◈ ◈
PROGRAM IDDGXACBwbUqRKRVR1TQojZBoRuV2TZJ8wVnQSuLKm2nJJLAUNCH APP ↗
1 WALLET DEPOSITS IN // ONLY 34-CHAIN SHA-256 SIGNATURES WITHDRAW OUT
34 HASH CHAINS // 1,124-BYTE LM-OTS SIGNATURE
POST-QUANTUM PROTOCOL · SOLANA MAINNETProtected by 34-Chain SHA-256 One-Time Signatures (RFC 8554 LM-OTS) · Immutable Custody.Security boundaries
POST-QUANTUM SHA-256 PROTOCOLRFC 8554 LM-OTS

Trade at full speed.
Lock your capital in
Quantum Safe.

Quantum Safe is a post-quantum one-way custody vault on Solana. Sweep your assets in from any hot wallet. Your wallet key can’t open it—only a 34-chain SHA-256 one-time signature can. One bad click never compromises your vault.

Hot wallet deposits in. 34-Chain SHA-256 LM-OTS key withdraws out.
QUANTUM SAFE
A bad click can’t empty your vaultStolen seed phrase = 0 vault accessEvery SHA-256 key works only onceWhere the protection stops
00 / CYBERNETIC STRESS TESTLIVE BREACH & DRAINER SIMULATION

Move fast on-chain.
Seal profits in SHA-256.

Test the Quantum Safe architecture live: realize profit in your active hot wallet, sweep capital into the Quantum Safe airlock, and trigger a simulated wallet drainer.

LIVE BREACH SIMULATION

Post-Quantum Custody · Stress-Test Terminal

TOTAL PROTECTED + ACTIVE1,000 SOL
ACTIVE TRADING WALLET (ED25519)
50 SOL

Standard elliptic-curve hot key. Exposed to phishing & quantum key recovery.

QUANTUM SAFE VAULT (34-HASH LOCK)
950 SOL

Protected by RFC 8554 LM-OTS one-time SHA-256 signatures. Wallet key cannot open it.

QUANTUM AIRLOCK SEALED · 34-CHAIN SHA-256 SHIELD ACTIVE
01 / SURFACESAME MISTAKE. TWO ENDINGS.

One bad signature.
Who keeps their capital?

Everyone clicks the wrong link eventually. Watch what happens to your assets with Quantum Safe versus an ordinary hot wallet.

This is everything you own.

Without a Quantum SafeAll of it sits in your wallet.

With a Quantum SafeA little stays in your wallet. The rest goes in your Quantum Safe.

An illustration. Not a guarantee.
01 / SURFACEWALLET EXPOSURE SCANNER

How exposed is your
active wallet?

Paste any Solana address. Instantly inspect every token balance and open delegate approval that a single malicious signature could sweep.

Read-only. Public chain data. Zero wallet connection required.
02 / THRESHOLD

Your hot wallet key stops at the vault airlock.

02 / THRESHOLD60-SECOND SIMULATION

Sign the fake claim.
Keep 100% of your vault.

Sweep your balance into Quantum Safe, approve a ruthless wallet drainer, and watch why Ed25519 wallet signatures have zero power over your vaulted assets.

Launch Interactive DemoNo wallet connection. Instant simulation.
SIMULATION / AFTER THE DRAIN
Active Hot WalletSigned a drainer’s transaction
EMPTIED
WALLET KEY STOPS HERE
Your Quantum SafeRequires 1,124-byte SHA-256 LM-OTS signature
Cryptographic separation enforced by the immutable on-chain SHA-256 verifier.
02 / THRESHOLDONE-WAY CRYPTOGRAPHIC VALVE

Trade from a hot wallet.
Custody in Quantum Safe.

An active trading wallet has to be fast, which makes it exposed. Sweep every win into your Quantum Safe address. Anything goes in from any terminal or exchange; nothing comes out with that wallet’s key.

Quantum Safe beside a trading terminal
03 / INSIDE

Past this point, the hash chains are yours.

03 / INSIDEWHAT YOU HOLD

Four pieces.
100% self-custodied.

Nobody at Quantum Safe holds a copy, and there is no admin backdoor.

  1. Your hot wallet

    For trading & gas.

    Keep your active trading size here. Sweep the rest.

  2. Your day key

    Opens the vault.

    Instant to your 4 cold wallets. 24-hour timelock to anywhere else.

  3. Your stop button

    Kills unauthorized pulls.

    One lightweight file. Cancels any pending withdrawal and burns the compromised key.

  4. Your recovery kit

    Mints fresh keys offline.

    Keep it air-gapped. Never uploaded to any website.

03 / INSIDEHOW THE CRYPTOGRAPHY WORKS

Five battle-tested primitives.
Pure SHA-256 security.

No experimental curves. Interactive live breakdown of the on-chain verification engine:

  1. ONE-TIME KEY
    GEN #104SINGLE-USE BURN
    KEY[0]0x9f4a…0000ACTIVE
    KEY[4]0x3c18…burnedRETIRED

    Every key works once.

    Use it to authorize a payout and it burns on-chain. The next generation key is already committed.

  2. SIGNED WITHDRAWAL
    PAYLOAD LOCK1,124 BYTES
    ASSETSOL (Native)
    AMOUNT420.00 SOL
    DESTColdVault…9xQ
    LM-OTS SHA-256 VERIFIED

    The key signs the whole withdrawal.

    Which coin, how much, where to. Change one digit and the 1,124-byte SHA-256 signature fails.

  3. 34 HASH CHAINS
    RFC 8554 LM-OTSCHAIN 1 / 34
    12345678910111213141516171819202122232425262728293031323334

    A key is 34 chains of hashes.

    One-time signatures specified in RFC 8554 (LM-OTS). Security rests on SHA-256 preimage resistance alone.

  4. TRUSTED ADDRESSES
    WHITELISTED POCKETS0s DELAY
    #1 Ledger ColdINSTANT
    #2 Trezor VaultINSTANT
    #3 Multisig SafeINSTANT
    #4 Offline NodeINSTANT

    Up to four cold wallets of your own.

    Pick your hardware wallets when you deploy the Quantum Safe. Withdrawals to them arrive instantly.

  5. WAITING PERIOD
    TIMELOCK SHIELD24:00:00
    23:59:59
    1-CLICK CANCEL ARMED

    Everything else waits.

    Choose up to seven days (24h default). While the clock runs, your Stop File cancels any unauthorized pull.

03 / INSIDEHONEST ABOUT THE EDGES

What it stops.
What it can’t.

Built to stop

  • A bad click while trading. Tricking your hot wallet does not open your Quantum Safe.
  • A stolen seed phrase. Your wallet seed phrase does not generate the Quantum Safe LM-OTS key.
  • Using a key twice. Every SHA-256 hash key works once. Each withdrawal rolls to a fresh one.
  • A stolen day key, while the wait is on. It can pay only the cold wallets you listed as yours. Anything else waits 24h, and you press stop.

Does not stop

  • A virus on your device. It can copy your key file and watch you type the password.
  • A stolen day key, if you turn the wait off. Then a thief can send everything anywhere, at once.
  • A trusted wallet that is not safe. A thief with your day key can pay it right away. Make it a hardware wallet they cannot reach.
  • A lost recovery kit. Nobody can reset it. Not even us.

Every boundary of the on-chain SHA-256 verifier is documented in the open specification. Read every security boundary.

04 / VISION & ROADMAPTHE POST-ELLIPTIC ERA · 6 STAGES OF BUILDING

Built for today’s drainers.
Engineered for the quantum future.

Standard wallets rely on elliptic curves (Ed25519 / ECDSA) that expose public keys on-chain and collapse on a single phished signature. Our vision is to decouple high-speed trading from sovereign settlement through six verifiable stages of engineering.

THESIS I · TODAY’S REALITY

The One-Way Cryptographic Airlock

Trading requires speed; custody requires finality. By separating your active Ed25519 hot wallet from your 34-chain SHA-256 vault, you can trade aggressively on any terminal and sweep profits into an airlock your wallet key can never open.

THESIS II · QUANTUM HORIZON

Shor’s Algorithm vs. Pure SHA-256

Fault-tolerant quantum computers will derive private keys from exposed elliptic-curve public keys. Quantum Safe eliminates curves from vault authority—anchoring security strictly in RFC 8554 Leighton-Micali One-Time Signatures (LM-OTS) with 256-bit SHA-256 preimage resistance.

THESIS III · THE FUTURE

Autonomous Terminal & Hardware Rails

From automated post-trade profit sweeping in Solana trading terminals and AI agent treasuries to stateless optical-QR SHA-256 hardware signers, Quantum Safe is building the permanent settlement standard for Solana.

ARCHITECTURE PIPELINE

Six Stages of Building — Gates, Not Dates

Explore Full Vision & Roadmap
  1. STAGE 01COMPLETE · VERIFIED

    RFC 8554 LM-OTS SHA-256 Core

    Pure Rust & TypeScript 34-chain SHA-256 signing engine (`LM-OTS_SHA256_N32_W8`), 1,124-byte verifier, and deterministic test vectors with zero curve dependencies.

    Inspect RFC 8554 Spec →
  2. STAGE 02MAINNET LIVE

    Immutable Solana Airlock PDA

    Mainnet program deployed with upgrade authority renounced. One-way deposit valve, 4 instant cold-wallet pockets, 24h timelock airlock, and 1-click Stop File cancel.

    Verify Mainnet Bytecode →
  3. STAGE 03COMPLETE · LIVE

    Air-Gapped Recovery Kit & CLI

    Browser-offline `scrypt` + `AES-256-GCM` Recovery Kit generator, standalone Node.js CLI (`qsafe-cli.mjs`), and read-only Wallet Exposure Scanner.

    Open Offline Keygen →
  4. STAGE 04LIVE · EXPANDING

    Quantum Watch Breach Telemetry

    Read-only RPC daemon and browser extension monitoring vault PDAs 24/7 with zero private keys—alerting the instant a withdrawal countdown begins.

    Open Quantum Watch →
  5. STAGE 05IN DEVELOPMENT

    Terminal & Bot Auto-Sweep SDK

    Direct CPI hooks and 1-click profit-sweep adapters for Solana trading terminals, DEX aggregators, sniper bots, and autonomous AI agent treasuries.

    Explore Terminal Hooks →
  6. STAGE 06FUTURE HORIZON

    Dedicated SHA-256 Hardware Signer

    Open-hardware specification and standalone Rust firmware for an air-gapped optical QR / USB-C LM-OTS keycard + RFC 8554 HSS multi-tree institutional vaults.

    View Hardware Horizon →
05 / FOUNDATIONSVERIFIED & IMMUTABLE

Code you can verify.
Upgrade authority renounced.

Quantum Safe runs against the deterministic, immutable on-chain SHA-256 custody program on Solana mainnet. Zero admin keys, zero protocol fees, and full CLI independence.

  1. 01
    Public source and testsEverything that holds or moves your capital is open source, with full LM-OTS test vectors.
    Open
  2. 02
    Deployment you can verifyThe program on Solana mainnet matches the published source byte for byte, with upgrade authority renounced.
    Done
  3. 03
    Mainnet CustodyReal Quantum Safe vaults holding real SOL & SPL tokens on Solana mainnet.
    Live
  4. 04
    Bug bountiesRewards for breaking the vault rules. Open to all security researchers.
    Open
  5. 05
    RFC 8554 Test VectorsDeterministic 34-chain LM-OTS SHA-256 verification suite with zero curve dependencies.
    Verified
04 / FOUNDATIONSQUESTIONS

Before you deploy.

Is Quantum Safe a wallet?

No. You keep the everyday hot wallet you already use to trade and interact with dApps. Quantum Safe is a separate post-quantum vault on Solana where you sweep your capital. Your hot wallet pays network fees; its Ed25519 signature cannot authorize a withdrawal from your Quantum Safe.

Why SHA-256 hash chains instead of standard wallet keys?

Standard Solana and Ethereum wallets rely on elliptic-curve signatures (Ed25519 / ECDSA), which expose a static public key and are vulnerable both to phishing drainers today and Shor’s quantum algorithm tomorrow. Quantum Safe uses RFC 8554 Leighton-Micali One-Time Signatures (LM-OTS) built purely from 34 parallel SHA-256 hash chains.

I already use a hardware wallet. Why would I need this?

A hardware wallet keeps your private key off your computer, but it still signs whatever transaction you approve—including a disguised drainer payload. Quantum Safe separates deposits from withdrawals using one-time SHA-256 hash chains, and your hardware wallet acts as the ideal instant-payout trusted destination.

What if someone steals my Day Key?

When you initialize a Quantum Safe you list up to four trusted addresses and a waiting period (24 hours by default) for everything else. A thief with your Day Key can only send instantly to your own trusted addresses. Any withdrawal to an unknown address enters the 24-hour public countdown—giving you time to upload your Stop File and cancel it immediately.

What happens if I lose my recovery kit or its password?

Your Day Key keeps working, so nothing is lost that day. However, the offline Recovery Kit is the only thing that can rotate a lost or stolen Day Key. Nobody can reset it for you—store the recovery kit offline.

What if this website goes away?

Your vault lives on the Solana blockchain with renounced upgrade authority and zero admin keys. Both the offline recovery tool and the single-file Node.js CLI (qsafe-cli.mjs) run locally against any Solana RPC without needing this website.

POST-QUANTUM CUSTODY · RFC 8554 LM-OTS

Seal your vault.