UNSHORYour Solana address is a public key.
Shor's algorithm turns a public key into its private key. Unshor keeps SOL in a vault that only a hash-based Winternitz signature can open, so there is no curve key to break.
How much of yours is on the curve?
Paste any Solana address. On Solana the address is the public key itself, so everything it holds is protected by Ed25519 alone.
Read-only. The page asks a public Solana RPC for the balance and token accounts and Jupiter for prices. Nothing is stored.
When the public key shows up
A quantum attack on a signature needs the public key. On Bitcoin and Ethereum it appears once you send. On Solana it is there before the first deposit.
| Chain | Public key visible | Signature |
|---|---|---|
| Bitcoin | After the first spend from an address (Taproot: as soon as it receives) | ECDSA / Schnorr, secp256k1 |
| Ethereum | After the first transaction an account sends | ECDSA, secp256k1 |
| Solana | Always. The address is the public key | Ed25519 |
| Unshor vault | Never before the one spend, and then it is a hash chain, not a curve point | Winternitz one-time, Keccak-256 |
Bars are illustrative, not measured shares of supply.
Behind a hash, live
Every Unshor vault is an account of one program. These numbers come straight from the chain.
How the vault works
No new wallet to install. Your usual wallet pays the network fee; the vault itself answers only to the phrase.
A phrase
24 words made in your browser. They never leave the page, and nothing derives them from your wallet's key.
A vault
Your SOL sits at an address computed from the hash of a Winternitz public key. No Ed25519 key can move it.
One signature
To withdraw, the phrase signs the amount, the destination and the next vault. The program checks 34 hash chains.
Then a new key
The vault empties: the amount to you, the rest to the next vault of the same phrase. No key is ever used twice.
Where things stand
No machine can do this today. The question is when, and every Solana balance waits for the network's own upgrade.
Dean Little publishes the Solana Winternitz Vault
A hash-based lamports vault. Unshor uses the same idea and adds a checksum, so a signature cannot be stretched to another message.
githubSolana core teams pick Falcon
Anza and Firedancer pick Falcon as the post-quantum signature. New wallets first, existing ones later, no date set.
coindeskEuropol: wallets are the weak point
Its cybercrime centre names crypto wallets as the main exposure to quantum attacks, without a date for when such machines arrive.
report coverageQuestions
Can a quantum computer do this today?
No. Estimates for a machine that breaks elliptic curve keys run from the early 2030s to decades away. A vault is for SOL you plan to hold through that.
Why not wait for Solana's Falcon upgrade?
You can. It has no date yet, and existing accounts move last. A vault works now, and you can take everything out any time.
What if I lose the phrase?
The SOL in the vault is gone. Nobody can recover it: not us, not the program, not your wallet. Write the 24 words down.
Who can change the program?
Nobody. The upgrade authority is removed at deploy, so the code on chain is final. It has no admin, no fee switch and no pause.
What does it cost?
About 0.00089 SOL of rent per vault, which moves on with your SOL, plus network fees. Unshor takes nothing.
Is it audited?
No. The program is open, tested in Agave's SBF VM against an independent signer, and small enough to read in ten minutes. Unaudited software.