one post-quantum layer 1 per coin
Lattice
Q-Day will break the signatures every blockchain uses today. Launch a coin, and it gets its own chain that is already signed the way that survives it.
- ML-DSA-65 · FIPS 204
- SLH-DSA · FIPS 205
- coin on pump.fun
The keys of every chain have an expiry date.
Solana, Bitcoin and Ethereum sign with elliptic curves. A large enough quantum computer recovers a private key from a public one. Nobody knows the year. Everybody agrees on the direction: in 2024 NIST published the signatures meant to replace them.
Big chains will migrate slowly, with votes and forks. A memecoin has no foundation to run that migration. So we give each coin its exit at birth: its own layer 1, signed only with the new NIST signatures, from block 1.
What is not post-quantum yet, we say below. It is a lifeboat, and we show where the water still comes in.
From a coin to its own chain, in one launch.
- 1
Name it
A name, a ticker and an image. Your Solana wallet signs once.
- 2
Two things go live
Your coin goes live on pump.fun. In the same minute, a new layer 1 starts and makes its first block.
- 3
Spend it as gas
On the chain the coin pays for every transaction. A faucet pays for the first ones. The 1:1 bridge from Solana opens after the security review.
- 4
Half the creator fee is yours
pump.fun splits the creator fee of your coin on chain: half to your wallet, paid by pump.fun itself.
Two signatures on every block. Check them yourself.
Seal one · ML-DSA-65 · 3,309 bytes
A lattice signature, NIST FIPS 204. The validator signs every block with it, and every account signs its transactions with it. No other key type is accepted.
Seal two · SLH-DSA · 17,088 bytes
A hash-based signature, NIST FIPS 205, over the chain state after the block before. Two families of math: if one breaks, the other still holds.
Post-quantum
- Every transaction on your chain
- Every block your chain makes
- Private notes, sealed with ML-KEM
Not post-quantum
- The coin on Solana
- The bridge between Solana and your chain
- Your Solana wallet
These use the same signatures as all of Solana. We say it here so nobody has to guess.
The chain page checks both signatures of each block in your browser, from the block data only.
Chains running now.
mainnet- Reading the chains…
Questions.
Is my coin post-quantum?
No. The coin lives on Solana and uses Solana signatures. The chain we start for it signs everything with ML-DSA-65 and seals every block a second time with SLH-DSA. The bridge between the two is not post-quantum.
Why a chain per coin?
So each community owns its exit. Its chain, its gas, its blocks. Nobody has to wait for a shared chain to vote on a migration.
What does it cost?
About 0.01 SOL in Solana costs, paid from your own wallet. Half of the pump.fun creator fee of your coin goes to you, paid by pump.fun on chain.
What is on the chain on day one?
A faucet that pays for your first transaction, transfers in public or in private, and a chain page where your browser checks both signatures of every block. A launchpad for tokens on your chain comes later.
Are transfers private?
Only if you choose it. Private transfers use fixed sizes, so nobody outside can match who paid whom. The team that runs the chain can still see it. On the test network until an independent review.
Who runs the chain?
We do. Each chain has one validator, and that validator is us. It is fast and cheap, and it is centralized. We say it up front.
When does the bridge open?
After an independent security review and a multisig with hardware keys for the reserve. Until then nobody can deposit, so no customer coin is held by us. The faucet pays for gas.
What happens if nobody uses my chain?
Bridged coins can always come back to Solana, 1:1. We publish the exact rule for quiet chains before launch.