Seal it.
Nothing gets in.
A hedge for your SOL and tokens against Q day. If a quantum computer, or an AI that finds a faster attack, ever cracks the curve behind Solana wallets, every exposed balance can be drained at once. A TARDIGRADE vault never touches that curve. It opens with SHA256 hash chains and nothing else.
Your address is your public key.
It has been since day one.
On Solana the address is the public key. Shor's algorithm turns a public key back into its private key on a large enough quantum computer — roughly 2,330 logical qubits for a 256-bit curve. AI is pulling that date closer in every quantum lab, and nobody can name it. Every key that has ever touched the chain is already recorded: harvest now, drain later.
Thirty locks. Zero curves.
Grow the chains
Your bunker key grows 30 secrets, each hashed 255 times. The ends fold into one root. That root is the vault's address. There is no private key.
Reveal one point each
To move funds you reveal one point on each chain. The message — amount, recipient and the vault the remainder rolls into — decides where each point sits.
Walk the chains on chain
The program walks every chain the rest of the way, about 4,000 SHA256 steps. Matching the root opens the vault. One wrong byte keeps it shut.
One key, one use
Each key opens its vault once. Whatever you didn't send moves to a new vault under a new key in the same transaction.
Built for the machines
that are coming for your keys.
| Normal wallet | TARDIGRADE vault live | |
|---|---|---|
| opens with | ed25519 signature | 30 SHA256 hash chains |
| rests on | discrete logarithms — Shor solves them | hash preimages — no known fast algorithm |
| against a quantum computer | private key falls out | about 112 bits of security left |
| against smarter software | a structured problem to attack | no structure to grab, just hashing |
| key reuse | same key forever | one use, then it rolls to a new key |
| holds | everything | SOL and any SPL or Token 2022 token |
Who is exposed. Who is sealed.
Most exposed wallets scanned
Board →Live from the bunker
Terminal →Hedge against Q day.
It costs a network fee.
Nobody knows the day a machine breaks ed25519. Every exposed wallet will find out together. Seal your assets now; unlock them with one click whenever you want.
See what a quantum computer would see first.
Paste any Solana address. The scan reads the live ledger: balance, every SPL and Token 2022 position, how long the public key has been on chain, and what all of it is worth right now.
Open a bunker. Seal what you hold.
Connect your wallet, grow a bunker key from a signature only your wallet can produce, and seal a vault behind thirty SHA256 chains. Unsealing is one click and rolls the remainder into a fresh vault.
Connect a Solana wallet to begin.
Most exposed wallets scanned.
Every wallet that has been through the scanner, ranked by the value sitting behind an ed25519 key.
Thirty locks. Zero curves.
A TARDIGRADE vault is a Lamport-style one-time construction built from SHA256 hash chains. Nothing in it depends on elliptic curves, so nothing in it is a target for Shor's algorithm.
Grow the chains
Your bunker key grows 30 secrets, each hashed 255 times. The ends fold into one root. That root is the vault's address. There is no private key.
Reveal one point each
To move funds you reveal one point on each chain. The message — amount, recipient and the vault the remainder rolls into — decides where each point sits.
Walk the chains on chain
The program walks every chain the rest of the way, about 4,000 SHA256 steps. Matching the root opens the vault. One wrong byte keeps it shut.
One key, one use
Each key opens its vault once. Whatever you didn't send moves to a new vault under a new key in the same transaction.
The numbers
Why hashes survive
Shor's algorithm breaks problems with hidden periodic structure — discrete logs, factoring, the curve under ed25519. A SHA256 preimage has no such structure. The best quantum attack is Grover's search, which only halves the exponent. That is the whole bet: swap a problem a quantum computer is built for with one it isn't.
Each key is used exactly once. Revealing one point per chain leaks nothing about the others, and the remainder rolls to a new root in the same transaction, so there is never a reused key on chain.
| Normal wallet | TARDIGRADE vault | |
|---|---|---|
| opens with | ed25519 signature | 30 SHA256 hash chains |
| rests on | discrete logarithms — Shor solves them | hash preimages — no known fast algorithm |
| against a quantum computer | private key falls out | about 112 bits of security left |
| against smarter software | a structured problem to attack | no structure to grab, just hashing |
| key reuse | same key forever | one use, then it rolls to a new key |
| holds | everything | SOL and any SPL or Token 2022 token |
$TARDIGRADE
The token behind the bunker. Live on Solana via pump.fun.
Live from the bunker.
Every scan, every key grown, every chain walked, every vault sealed. Type help for commands.