Quantum-safe custody · Solana ⇄ Soqucoin

Quantum-safe custody for Solana.

Every Solana wallet is signed with Ed25519 — a classical signature a quantum computer will eventually break. Adversaries can harvest now and decrypt later. SOQ-TEC is the gateway that moves value into a post-quantum vault on the Soqucoin L1, and back, without ever trusting a signature quantum computers can forge.

How it works Read the code
L1 block—
Gateway relaySTANDBY
USDSOQ peg$1.0000
SettlementML-DSA-44
The Soqucoin vault Funds held on Solana's open floor are walked through the SOQ-TEC door into the Soqucoin bank vault for post-quantum safekeeping. SOLANA open floor SOQ-TEC SOQUCOIN VAULT post-quantum custody
The gateway: value walks off Solana’s open floor, through SOQ-TEC, into the post-quantum vault.
§ 01 — The thesis

Solana is the shopping mall. Soqucoin is the bank vault inside it. SOQ-TEC is the door to the vault.

Solana is the mall — fast, crowded, liquid, and classical. Every shopper’s wallet signs with Ed25519, out in the open on the floor, where a future quantum computer could pick the locks. Soqucoin is the bank vault inside that mall: a Dilithium-native L1, deliberately unhurried, built for one job — keeping value safe.

SOQ-TEC is the entrance to the vault. Walk your funds off the mall floor and through the door for safekeeping behind post-quantum locks; walk them back out when you want the speed of the floor. Nothing leaves the mall — it just gains a vault.

§ 02 — Quantum Express

Quantum Express settles a cross-chain transfer in under thirty seconds — without waiting for an attestation quorum first.

The trick is physics, not trust. When you burn pSOQ on Solana, the tokens stop existing — a state change no reorganization or validator majority can reverse. Because the burn is irreversible, the gateway can release SOQ on the L1 immediately. A separate, deferred batch later commits a 3-of-5 ML-DSA-44 (Dilithium) attestation — a Merkle root anchored to both chains — as the post-quantum audit layer.

Optimistic release runs today on Solana devnet → Soqucoin stagenet. The batched post-quantum attestation and the 240-block maturity window are planned for mainnet.

Quantum Express — two-phase confirmation Phase 1: pSOQ is burned on Solana (irreversible); the gateway optimistically releases SOQ on the Soqucoin L1 in under 30 seconds. Phase 2 (planned): a deferred 3-of-5 Dilithium attestation commits a Merkle root to both chains. Phase 1 — optimistic release · < 30 s pSOQ Solana · SPL burn irreversible gateway relay ~2 s SOQ Soqucoin L1 secured by the physical irreversibility of the burn Phase 2 — deferred attestation · planned Σ releases 3-of-5 Dilithium Merkle root ML-DSA-44 · committed to both chains
Fig. 1 — Quantum Express. The burn can’t be undone, so settlement needn’t wait; the post-quantum attestation follows as an auditable batch.
Settlement latency
< 30 s · typically ~10 s
Attestation
3-of-5 ML-DSA-44 · FIPS 204
Fee
0.1% · min 10 SOQ
Safety
Circuit breaker · halts on reserve mismatch
§ 03 — The XMSS Revolving Door
XMSS Revolving Door vault A ring of one-time WOTS+ keys. Each operation consumes the active key and the door advances to the next; when the tree is exhausted the vault atomically rotates to a fresh one. Value custody is WOTS+ then Dilithium — never Ed25519. WOTS+ → Dilithium
Fig. 2 — The Revolving Door. One key, one signature; the door advances. Exhaust the tree and the vault rotates atomically — no moment where value rests on a classical key.

A signature you can only use once can’t be replayed, and a key that’s already spent can’t be stolen. The vault is built entirely from WOTS+ — hash-based one-time signatures over Keccak256.

Each withdrawal consumes the key at the current position and the “door” advances by one. When the tree is exhausted, the vault rotates atomically to a fresh tree in a single transaction — there is never a window where custody falls back to a classical key. Value moves WOTS+ → Dilithium and back; Ed25519 only ever pays Solana’s transaction fee, never guards value.

Security rests on hashes, not algebra — the structure Shor’s algorithm has no purchase on.

Signatures
WOTS+ · Keccak256, w=16
Per tree
One-time keys · auto-rotating
Custody chain
WOTS+ → Dilithium · zero classical touch
Status
Vault live on devnet · atomic rotation planned
§ 04 — Live gateway
Gateway activityConnecting…
[SYSTEM] SOQ-TEC gateway initializing…
[SYSTEM] Connecting to relayer service…
[SOQ-TEC] Gateway relayer: soqtec-relay.soqu.org
[SOQ-TEC] 3-of-5 threshold signing ready
Solana devnet feed9pCJxj…Pw36Connecting…
Burns0
Transfers0
Prog calls0
tpSOQ—
WS—
[WS] Connecting to wss://api.devnet.solana.com …
§ 05 — Security model

SOQ-TEC’s post-quantum claim is forward-looking: when a quantum computer can run Shor’s algorithm, today’s Ed25519 and ECDSA signatures become forgeable — and every classical bridge with them. The attestation and the vault are built on lattice and hash cryptography that has no known quantum attack. We don’t claim it would have stopped past bridge exploits — those were implementation bugs, and correct, audited code prevents that class.

01

Burn irreversibility

Optimistic settlement rests on a state change no reorg can undo — not on trusting a quorum first.

02

3-of-5 Dilithium attestation

Forging an attestation needs three independent ML-DSA-44 keys — signatures quantum computers cannot recover.

03

Hash-based vault

Custody is WOTS+ one-time keys, then Dilithium. Value never rests on Ed25519.

04

Circuit breaker

Releases halt automatically if total burned and total released stop reconciling, pending multisig review.

Stagenet / devnet preview — not mainnet, not for real value. Independent audit: Halborn (completed & remediated); a post-mainnet review covers the production deployment.

§ 06 — Build on it

The gateway, the XMSS vault program, and the relayer are open source under MIT. Read the architecture, the bridge spec, and the on-chain programs.

github.com/soqucoin/soqtec Protocol docs