Freeze authority
Many tokens keep an issuer key that can freeze them in any account, the vault included. It is listed per token before you move anything.
QuantumCitadelLaunch app
Bunker mode for Solana
The last fortressbefore Q-Day
Move SOL and SPL tokens into a vault that answers to hash-based one-time signatures, not to your Ed25519 key.
02Threat
Your address
is your public key
On Solana an account address is not a hash of a key. It is the Ed25519 public key itself, so there is nothing to hide behind. If elliptic-curve cryptography falls, to a quantum computer or to new mathematics, every funded address is already a published target.
Ed25519 is not broken today. Bunker mode is preparation, not panic.
Account addressbase58 · 32 bytes
=Ed25519 public keyexposed
| Chain | Address is | Key visible |
|---|---|---|
| Bitcoin | hash(public key) | when coins are spent |
| Ethereum | keccak(public key) | after the first transaction |
| Solana | the public key itself | always |
03How the vault works
Hash-based vault
Withdrawals are authorized by a one-time hash-based signature checked on-chain. Elliptic curves fall to Shor's algorithm; hash functions only face Grover's square-root speedup. The keys behind your vault are hash chains, not curve points.
- 01
Scan
We read your wallet and mark every asset: ready, needs action, unsupported, or undermined by its own issuer.
- 02
Prepare keys
24 words on your device generate a chain of one-time Winternitz keys. They never leave it, and our server never sees them.
- 03
Migrate
You approve the transfers once in your usual wallet. Assets move into a program-owned vault whose address never changes.
- 04
Verify
Each transfer is confirmed on-chain before it is shown as fortified. A failed step stops the sequence instead of hiding.
04One key, one signature
Your keys can change.
Your fortress remains.
A Winternitz key may sign exactly once. Every withdrawal is signed by the current key and, in the same transaction, hands the vault to the next key in your chain. The vault address stays the same; a used key is worthless to anyone who sees it.
KEY 003 ARMED · 3 SPENT
- Key 000spentarmedsealedinitialize vault
- Key 001spentarmedsealedwithdraw 0.5 SOL
- Key 002spentarmedsealedwithdraw 120 USDC
- Key 003spentarmedsealedwithdraw 3 000 JUP
- Key 004spentarmedsealedclose a token account
- Key 005spentarmedsealednext withdrawal
05Fortification sequence
Nothing is fortified
until the chain says so
Migration is a sequence of independent transfers, each simulated, approved by you, and checked on the network. The screen moves only on confirmations. If one step fails, the rest stay valid and the failure stays visible.
Fortification sequencedemo
- [~]Vault initializedconfirming…
- [ ]SOL 4.20 → vaultqueued
- [ ]JUP 1 250 → vaultqueued
- [ ]USDC 900 → vaultqueued
- [ ]RUG 10 000queued
Confirmed on-chain0 / 4
06What we won't hide
A vault protects your key.
Not everything else.
Permanent delegate
Some Token-2022 mints let the issuer move tokens out of any account. A vault cannot protect those, so we say so instead of fortifying them.
No score
There is no “100% quantum-safe” badge here. You see which assets are in the vault, which are not, and why.
Upgrade authority
Whoever holds the program's upgrade key can change the rules for every vault, and that key is Ed25519 too. It is shown live, here and next to your balance, until the program is made immutable.
Reading program…
07Questions
Before you enter
Is Ed25519 broken?+
No. There is no known practical attack today. Quantum Citadel is preparation: moving long-term holdings calmly, before anyone has to.
Can Quantum Citadel move my funds?+
No. The vault answers only to your one-time keys, which exist on your device. There is no master key and no admin withdrawal. The program's upgrade key is shown live until the program is made immutable.
What if I lose the 24 words?+
The vault cannot be opened, by you or by us. Write the words down offline and check the backup before the first deposit. The app makes you do both.
What if this site disappears?+
The vault lives on Solana. Any compatible client, including the open-source CLI, can withdraw with your 24 words.
Do I need $QCTDL?+
No. Creating a vault, moving assets in and withdrawing them never require the token. It pays for optional services only.
What does it cost?+
Network fees, plus rent the network holds while accounts exist: about 0.001 SOL for the vault and 0.002 SOL per token it holds. No fee on withdrawals.
Enter bunker mode
Prepare before the cryptography breaks.