Quantum immunity
Replaces vulnerable elliptic-curve keys with hash-based math that quantum computers cannot shortcut.
QSL1 · Post-quantum custody on Ethereum L1
QuantumShield L1 locks your ERC-20 tokens and NFTs in a vault that only moves when your device presents a hash-based STARK proof. No elliptic-curve keys to crack, no bridges, no leaving mainnet.
// 01 — Threat model
Every Ethereum account is guarded by an elliptic-curve key. Once a large quantum computer runs Shor's algorithm, any public key that has ever signed a transaction can be turned back into its private key. QSL1 moves custody behind hash functions, which quantum computers can only attack by brute force.
| Standard wallet | QSL1 vault | |
|---|---|---|
| Security assumption | Elliptic-curve discrete log | Hash preimage resistance |
| Shor's algorithm | Key recovered | No effect |
| Exposed on-chain | Public key, forever | Hash commitment, rotated every action |
| Authorization | ECDSA signature | Proof bound to the exact transfer |
| Trusted setup | — | None |
| Where assets live | Ethereum L1 | Ethereum L1, no bridges |
// 02 — How it works
Lock your tokens in the QSL1 vault smart contract on Ethereum. ERC-20s and NFTs are supported.
vault.depositERC20(id, token, amount)
To authorize a movement, your device builds a proof from ultra-secure hash functions. Your secret key never leaves it.
proof = prove(seed, nonce, digest)
The Ethereum L1 contract checks the proof and releases the transfer. No vulnerable signatures involved.
verify(proof) → release(to, amount)
// 03 — Key advantages
Replaces vulnerable elliptic-curve keys with hash-based math that quantum computers cannot shortcut.
No secret setup ceremonies. Every parameter is public and every proof can be checked by anyone.
Maximum security and availability on Ethereum itself, with no bridges or secondary networks to trust.
// 04 — Vault console
Your wallet pays gas and makes deposits. Withdrawals are authorized only by the proof generated in this browser.
Reference implementation. This deployment verifies Winternitz one-time proofs (WOTS-16 over
keccak256): the same post-quantum, setup-free hash assumption STARKs rely on, checked in a single L1
transaction. The verifier is isolated in WOTS.sol so a full STARK verifier can replace it.