SOQ-TEC · Solana reference lane · Solana ⇄ Soqucoin

Post-quantum settlement software for Solana.

Every Solana wallet is signed with Ed25519, a classical signature a quantum computer will eventually break. Adversaries can harvest now and decrypt later. SOQ-TEC is software a licensed custodian runs to move value between Solana and the Soqucoin L1 under post-quantum signatures. Soqucoin Labs demonstrates it on Solana devnet and Soqucoin stagenet only.

SettlementML-DSA-44
NetworksSolana devnet · Soqucoin stagenet
StatusDemonstrated · no live deployment
The Soqucoin L1 Value on Solana moves through SOQ-TEC into ML-DSA-44 addresses on the Soqucoin L1. SOLANA Ed25519 SOQ-TEC SOQUCOIN L1 ML-DSA-44 addresses
Value on Solana moves through SOQ-TEC into ML-DSA-44 addresses on the Soqucoin L1.
§ 01 — The thesis

Solana signs with Ed25519. Soqucoin signs with ML-DSA-44. SOQ-TEC is the settlement software between them.

Solana signs with Ed25519, a classical signature. A future quantum computer running Shor’s algorithm recovers an Ed25519 private key from its public key, and every Solana wallet publishes its public key the first time it signs. Soqucoin signs with ML-DSA-44, the NIST FIPS 204 lattice scheme, which has no known quantum attack.

SOQ-TEC is the settlement software that lets a licensed custodian move value between the two chains and hold it under post-quantum signatures on Soqucoin. The custodian operates it under its own licence. Soqucoin Labs builds the software and demonstrates it on test networks.

§ 02 — Quantum Express

Quantum Express settles a cross-chain transfer in under thirty seconds — without waiting for an attestation quorum first.

The trick is physics, not trust. When you burn pSOQ on Solana, the tokens stop existing, a state change no reorganization or validator majority can reverse. Because the burn is irreversible, the operator’s relayer can release SOQ on the L1 immediately. A separate, deferred batch later commits a 3-of-5 ML-DSA-44 (Dilithium) attestation, a Merkle root anchored to both chains, as the post-quantum audit layer.

Optimistic release is demonstrated on Solana devnet and Soqucoin stagenet. The batched post-quantum attestation and the 240-block maturity window are part of the production design.

Quantum Express — two-phase confirmation Phase 1: pSOQ is burned on Solana (irreversible); the operator's relayer optimistically releases SOQ on the Soqucoin L1 in under 30 seconds. Phase 2 (production design): a deferred 3-of-5 ML-DSA-44 attestation commits a Merkle root to both chains. Phase 1 — optimistic release · < 30 s pSOQ Solana · SPL burn irreversible relayer relay ~2 s SOQ Soqucoin L1 secured by the physical irreversibility of the burn Phase 2 — deferred attestation · production design Σ releases 3-of-5 Dilithium Merkle root ML-DSA-44 · committed to both chains
Fig. 1 — Quantum Express. The burn can’t be undone, so settlement needn’t wait; the post-quantum attestation follows as an auditable batch.
Settlement latency
< 30 s · typically ~10 s
Attestation
3-of-5 ML-DSA-44 · FIPS 204
Fee (design parameter, set by the operator)
0.1% · min 10 SOQ
Safety
Circuit breaker · halts on reserve mismatch
§ 03 — The XMSS Revolving Door
XMSS Revolving Door vault A ring of one-time WOTS+ keys. Each operation consumes the active key and the door advances to the next; when the tree is exhausted the vault atomically rotates to a fresh one. Value custody is WOTS+ then Dilithium — never Ed25519. WOTS+ → Dilithium
Fig. 2 — The Revolving Door. One key, one signature; the door advances. Exhaust the tree and the vault rotates atomically — no moment where value rests on a classical key.

A signature you can only use once can’t be replayed, and a key that’s already spent can’t be stolen. The vault is built entirely from WOTS+ — hash-based one-time signatures over Keccak256.

Each withdrawal consumes the key at the current position and the “door” advances by one. When the tree is exhausted, the vault rotates atomically to a fresh tree in a single transaction — there is never a window where custody falls back to a classical key. Value moves WOTS+ → Dilithium and back; Ed25519 only ever pays Solana’s transaction fee, never guards value.

Security rests on hashes, not algebra — the structure Shor’s algorithm has no purchase on.

Signatures
WOTS+ · Keccak256, w=16
Per tree
One-time keys · auto-rotating
Custody chain
WOTS+ → Dilithium · zero classical touch
Status
Demonstrated on Solana devnet · atomic rotation in the production design
§ 04 — Demonstration
Demonstration recordSolana devnet · Soqucoin stagenet
[RECORD] SOQ-TEC Solana lane, demonstrated on Solana devnet and Soqucoin stagenet with test tokens.
[RECORD] Quantum Express: pSOQ burned on devnet, SOQ released on stagenet by the demonstration relayer.
[RECORD] XMSS Revolving Door: vault opened, deposited, withdrawn twice with WOTS+ signatures, key reuse rejected on-chain.
[RECORD] Circuit breaker: paused and resumed on-chain; a burn attempted while paused was rejected.
[RECORD] The demonstration relayer and its status feed were taken down at the end of the demonstration. Nothing on this page is live.

A scripted replay of the demonstration with links to every devnet transaction is on the demonstration page.

On-chain programsSolana devnet · permanent
Gateway program (Quantum Express)
9pCJxjVF8VTizZ9RZZLTu997y2DafWgUGqYbrNiqPw36
Vault program (XMSS Revolving Door)
7k4TwwBSZ4a7JA83MgSsqxczU6bpR7qV3uUNGWbTEz8H
pSOQ test mint (devnet)
7TCU5SnLR7ARRAd8aUdoAFgw9zvCvzwdphm7TjUT6s46
The explorer belongs to no one here. Open any address and check it yourself.
§ 05 — Security model

SOQ-TEC’s post-quantum claim is forward-looking: when a quantum computer can run Shor’s algorithm, today’s Ed25519 and ECDSA signatures become forgeable — and every classical bridge with them. The attestation and the vault are built on lattice and hash cryptography that has no known quantum attack. We don’t claim it would have stopped past bridge exploits — those were implementation bugs, and correct, audited code prevents that class.

01

Burn irreversibility

Optimistic settlement rests on a state change no reorg can undo — not on trusting a quorum first.

02

3-of-5 Dilithium attestation

Forging an attestation needs three independent ML-DSA-44 keys — signatures quantum computers cannot recover.

03

Hash-based vault

Custody is WOTS+ one-time keys, then Dilithium. Value never rests on Ed25519.

04

Circuit breaker

Releases halt automatically if total burned and total released stop reconciling, pending multisig review.

Demonstrated on stagenet and devnet; not mainnet, not for real value. Independent audit: Halborn (completed and remediated). A production deployment by a licensed operator would carry its own review.

§ 06 — Build on it

The gateway program, the XMSS vault program, and the relayer are open source under MIT. Read the architecture and the on-chain programs.