Prepare for
Q-Day.
bunq is a complete quantum-ready DeFi app — create hash-based vaults, launch tokens, and swap across chains privately. Built so a quantum computer can't empty your wallet. Live on mainnet.
The crypto that secures your wallet was not built for quantum computers.
Every mainstream wallet signs with elliptic-curve keys. That math is exactly what a quantum computer is good at breaking. The threat is not hypothetical — it has a timeline.
Adversaries are already recording encrypted chain data today, waiting to break it the day a quantum computer arrives. Your long-held keys are the target.
A large enough quantum computer runs Shor’s algorithm to recover private keys from the public keys that secure Ed25519 and every ECC wallet in use.
When it lands, exposed public keys become spendable. Funds don’t need to move — they just stop being yours. Migration after the fact is too late.
Everything quantum-safe, in one place.
A wallet whose authority is a hash-based one-time key. Every spend is verified on-chain by walking Keccak-256 chains — and the key rotates in the same instruction, so it can never be reused.
Open VaultLaunch a token on mainnet, bound to a post-quantum WOTS + Merkle attestation. Your wallet signs and pays; the mint carries a fingerprint no elliptic-curve break can forge.
Open LaunchCross-chain swaps routed privately — no account, no KYC. Send to a one-time deposit address; the route breaks the on-chain link before the output reaches you.
Open SwapSecurity that rests on hashing, not curves.
Winternitz one-time signatures reduce the entire security of your wallet to one assumption: that Keccak-256 is hard to invert. There is no public-key secret for a quantum computer to recover.
Winternitz OTS relies only on the security of Keccak-256 — hashing, not elliptic curves. There is nothing for Shor to factor.
Each spend commits to the next public key and rotates in the same instruction. A used key verifies against a key that no longer exists.
The vault program walks every hash chain (~695k CU) and checks the stored public key. Live and executable on Solana mainnet today.