Last measurement
Opened at slot of
- Top outcome
- →
- Coin
Verify: job id, backend and the full counts are on the coin page.
Born post-quantum.
Opened by a quantum computer.
Mint authority burned. Treasury on hash-based signatures. A real QPU measurement opens every launch. Solana.
How it works
Authority burned at launch.
Mint and freeze authority are revoked inside the launch transaction. No one can print more, no one can freeze yours.
Treasury post-quantum by default.
Creator fees land in a Winternitz vault: one-time hash-based signatures, a fresh address on every spend.
Opening slot set by a quantum measurement.
Eight qubits in superposition, measured on IBM hardware. The top outcome is a number from 0 to 255: the slot in the launch window at which trading opens.
2.5% of every trade to the creator.
Paid in SOL.
Q-Day, without the date.
We don't know the year. Nobody does. What is on the record:
-
Expert survey. 26 experts, Global Risk Institute, March 2026: a 28–49% chance of a cryptographically relevant quantum computer within 10 years, 51–70% within 15.
-
Resource estimate. RSA-2048 in under a week with fewer than a million noisy qubits (Gidney, Google Quantum AI, May 2025). The 2019 estimate was 20 million.
-
BTC in exposed addresses ≈ 1.7M–6.3M. Estimates put it between about 1.7M BTC in early pay-to-pubkey outputs (Ark Invest / Unchained, 2026) and 6,262,905 BTC in every output with a revealed public key (Project Eleven, 2025); Chaincode Labs gives 4–10M.
-
Standards. NIST FIPS 203 (ML-KEM), 204 (ML-DSA), 205 (SLH-DSA), August 2024.
-
Solana. Ed25519 signatures are not quantum-resistant. Winternitz Vault (Dean Little, January 2025) is live and opt-in; Project Eleven and Solana Foundation ran a post-quantum testnet in December 2025.
-
Bitcoin. BIP-360, Pay-to-Merkle-Root, is a draft.
Launch
Coins
| coin | opened at | job id | price | to graduation |
|---|---|---|---|---|
| $TICKER | slot 178 · 14:02 UTC | d2q7m3…4nhe | 0.000012 SOL | 38% |
| $TICKER | slot 41 · 11:50 UTC | d2q5r1…9kpa | 0.000004 SOL | 9% |
| $TICKER | in queue · ibm_kingston | d2q8w0…2mzc | — | — |
FAQ
Is trading quantum-safe?
No. Trades on Solana are signed with Ed25519, and a large enough quantum computer could break that. We don't change it and we don't claim to. What is post-quantum here: the mint authority is gone, so there is no key to steal that could print tokens, and the creator treasury sits behind hash-based signatures.
What does the quantum computer decide?
When. One small circuit: eight qubits put in superposition with Hadamard gates and measured 1024 times. The most frequent 8-bit outcome is a number from 0 to 255: the slot inside the launch window at which trading opens. It decides a moment that nobody, including us, can pick. It does not secure anything.
Can I verify the job?
The coin page shows the job id, the backend, the circuit and the full counts per outcome as IBM returned them. The job id is IBM's receipt for that run. The circuit is small enough to rerun on the free Open Plan yourself: you will get a different top outcome, which is the point.
Which hardware?
ibm_kingston, a 156-qubit Heron r2 processor, open to IBM Quantum Open Plan users since March 2026. Never a simulator. If the queue is long, the coin waits in the queue with everyone else.
What is a Winternitz vault?
A Solana program by Dean Little (January 2025) that holds funds behind a Winternitz one-time signature instead of an Ed25519 key. Signing reveals about half of the private key, so each vault signs once: a spend closes it and opens fresh ones. Hashing is truncated Keccak256 with 224 bits of preimage resistance. It is opt-in and unaudited; the author's own words are "use this program at your own risk".
Why Solana?
Slots are 400 ms, so "opened at slot 178" is a real moment, not a block someday. Burning authority and writing metadata fit in one transaction. And the first post-quantum vault on a major chain shipped here.