Every Solana wallet signs with a curve. Quantum computers are built to break curves.
Solana accounts are secured by ed25519, an elliptic-curve signature. Shor's algorithm, run on a large enough quantum computer, can recover an elliptic-curve private key from its public key. Nobody can do that today. The point of cold storage is not having to guess when somebody can.
Hash-based signatures don't rely on curves. Winternitz one-time signatures are built only from a hash function, and the best known quantum attack on a hash only weakens it, it doesn't break it. Solana's open-source Winternitz vault uses exactly this to hold funds.
Today QPermafrost keeps every coin's reserve in dollars, so a SOL crash can't shrink it. Version 2 moves reserves behind that kind of signature, so a quantum computer can't touch them either.
Four steps. All of them on-chain.
Every coin launched on QPermafrost has its own reserve. It fills from trading fees, it's held in dollars, and the only thing it can ever do is buy the coin back.
Launch on pump.fun
Name, ticker, image. You sign in your own wallet, and the coin goes live on pump.fun's bonding curve.
Fees fill a dollar reserve
The share of creator fees you choose is swapped to USDC and sent to that coin's reserve. A SOL crash doesn't shrink it.
The reserve is frozen
The launcher can't take it back: the split is locked on pump.fun. The reserve wallet's code can only swap to USDC, buy back and burn, all on Solscan.
It buys the dip, then burns
When price falls a set amount below its recent high, the reserve buys the coin and burns what it buys. Every buy is logged with a Solscan link.
How a reserve defends. A simulation.
Pick a coin to see its reserve, how much of its market cap the reserve covers, and every buyback it has made.
| Coin | Mkt cap | Reserve | Coverage | Trigger |
|---|
Version 2: one key, one signature. Then the vault moves.
A Winternitz key is a set of hash chains. Signing reveals a point partway down each chain, which leaks part of the key, so a vault signs exactly once. Each buyback moves the remaining reserve into a fresh vault with a fresh key.
Press sign to run one buyback: the vault signs once, reveals its chain values, and the reserve moves to a new address.
Backed, not guaranteed.
Does the reserve stop a coin from going to zero?
No. It buys the coin when it dips, which supports the price and softens dumps. A reserve can run out, and a coin can still fail. We say "backed", never "guaranteed".
Why is the reserve in dollars?
So a SOL crash doesn't shrink it. Fees are swapped to USDC before they reach the reserve, so a $10k reserve stays a $10k reserve however SOL trades.
What does "quantum-proof" actually mean here?
Normal Solana wallets sign with ed25519, which a large quantum computer could break with Shor's algorithm. Version 2 puts reserves behind Winternitz one-time signatures, which are built only from a hash function. No known quantum attack breaks a hash; the best one (Grover's) only weakens it. The launch itself and your own wallet still use ed25519, like every Solana transaction.
Can anyone withdraw the reserve?
The launcher can't: their share is locked on pump.fun the moment they sign. Today the reserve sits in one public wallet run by the QPermafrost server, and its code has no withdraw path, only "swap fees to USDC" and "buy back and burn". Every move is on Solscan, linked above. Version 2 moves reserves into an on-chain vault program so not even we hold the key.
Who gets the rest of the creator fees?
The launcher. You pick the reserve share when you launch (10% to 100%), and the rest of pump.fun's creator fee goes to your wallet as normal.
Is the reserve quantum-proof today?
Not yet. Version 1 is a normal Solana wallet (ed25519), run in public. Version 2 moves every reserve behind a Winternitz hash-based vault program, after an audit. That is the quantum-safe part, and we'll say so here the day it ships.