Write down 24 words.
Your quantum key is made in your browser. It never leaves it.
Schrödinger's vault
Quantum-proof your bags.
A box drainers can't empty today, and quantum computers can't open tomorrow.
Built for Robinhood ChainXMSS · RFC 8391Checked onchain
Your key is already public.
One transaction and your public key is onchain forever. A quantum computer needs nothing else.
vitalik.eth's public key. Onchain since October 1, 2015.
9 minto crack an exposed key, in Google's March 2026 estimate.
6M+ BTCalready behind exposed keys. Robinhood's: 100%. CoinDesk, Oct 8.
“Months, not years.”Justin Drake, Ethereum Foundation, on ECDSA. Oct 7.
“Could adversely affect Robinhood Chain.”Robinhood's own 10-Q, on quantum computing. Read it
Your hardware wallet won't save you.
It hides the private key. The public key is still on the chain.
ComparedHot walletHardware walletQatze box
One bad signatureDrainedDrainedShut
Key after one transactionPublicPublicSpent. Next one hidden.
Signature checked byECDSAECDSAECDSA + XMSS
Rests onElliptic curvesElliptic curvesSHA-256 only
On Q-DayOpenOpenShut
Dead or alive?
Paste a wallet or a Bitcoin address. We look for its public key.
Try
Two keys. One box.
Your wallet sends. Your 24 words sign. The chain checks both: one hash-based key per opening, 1,024 of them, all under one root.
Fill the box.
Send ETH, USDG or any stock token to your box address.
Open with both keys.
A hash-based signature, checked onchain. Shor's algorithm finds nothing to break.
Math, not promises.
Every claim on this page can be checked. Start with these.
XMSSThe hash-based signature of RFC 8391. Ethereum's own quantum plan uses this family.Read the paper
Byte-exactSame signatures as the official XMSS reference code. Verify one in your browser.Verify
OnchainThe box checks every signature itself. A real opening: 805k gas, about 4 cents.See it
No adminNobody can freeze, upgrade or open your box. Not even us.How
Live on Robinhood Chain
The canary.
A key nobody holds. If it ever moves, every box hears it.
Its key is the hash of a public sentence, turned into a curve point. Only breaking ECDSA can sign for it. That is exactly what a quantum computer would do first. Every box fee feeds it, so the bounty keeps growing.
$QAT
Every box burns it.
Each new box pays a small fee into the furnace. A fifth feeds the canary's bounty. The rest buys $QAT and burns it. Hold $QAT and your boxes are free.
Box feeSet at launch
$QAT burnedStarts at launch
Fed to the canaryStarts at launch
In the furnace—
Launching on Robinhood Chain.
Questions
Is it useful before Q-Day?
Yes. Most thefts today are a drained wallet: one bad signature, one leaked key. Your wallet alone can't move anything out of a box, the 24 words have to sign too. So a drainer gets nothing.
Is Q-Day real?
Nobody knows when. Google's March 2026 paper puts a key-breaking machine at under 500,000 qubits. Governments want ECDSA gone by 2035. Moving early costs a few cents.
What can I put in a box?
ETH, USDG, $QAT, any Robinhood stock token, any ERC-20 or NFT on Robinhood Chain. Just send it to your box address.
Can I trade without taking my stocks out?
Yes. The box swaps on Uniswap itself: pick a stock, sign with your 24 words, the result lands back inside. Nothing ever leaves quantum protection.
Why two keys?
Your wallet alone can't open the box, so a drainer or a leaked key gets nothing. On Q-Day a wallet key can be forged, but the 24 words can't. You need both.
And when Q-Day comes?
When wallet keys really start falling (the canary will tell), turn on Q-Day mode with both keys. Then any wallet can open your box with the 24 words, so a broken or drained wallet can't lock you out.
Can my Ledger be the owner wallet?
Yes. Connect it through MetaMask or Rabby. It stays your first lock; the 24 words are the second, the one Q-Day can't break.
How much does it cost?
Gas on Robinhood Chain: about 15 cents to create a box, about 4 cents to open it. A new box also pays a small fee that burns $QAT and feeds the canary. Hold $QAT and it's free.
Do I type 24 words every time?
Only if you want to. Save them once behind a passkey: then Face ID or Touch ID fills them in, on that device only. Paper stays your backup.
What if I lose my 24 words?
The box stays shut. Forever. Write them on paper, keep two copies, never type them anywhere but this app.
What if I lose my wallet?
Your 24 words alone can hand the box to a new wallet. It takes 7 days, so a thief can be stopped in time.
Is it audited?
Not by a third party yet. It passes the official XMSS vectors, six internal security reviews, 82 contract tests and 36 end-to-end checks, and every signature is checked onchain. Start small. Everything we claim, and don't.