Shor can't
touch this.
1,000 pixel Quants whose provenance is signed with ML-DSA-65, the FIPS 204 post-quantum signature. When the quantum computer shows up for everyone's elliptic curves, the signature on your Quant still checks out. Hold $QUANTS, mint free, verify it in your browser.
- unminted
- 1,000
- minted
- 0
- gate
- 1,000,000$QUANTS
The quantum computer isn't here. The estimates keep getting smaller.
Shor's algorithm, run on a big enough error-corrected quantum computer, turns a public key back into its private key. That covers ed25519, secp256k1 and RSA, which is to say most of crypto.
In March 2026 Google Quantum AI estimated that 256-bit elliptic curve keys could fall to under 1,200 logical qubits, roughly half a million physical ones, in minutes. The biggest logical-qubit demos so far are in the tens. So: not today. But the gap is a hardware problem now, and everyone is building hardware.
Quants is our answer, in jpeg form: a collection whose signatures were made with the math meant to outlive that day.
| ed25519 | ML-DSA-65 | |
|---|---|---|
| What it is | Elliptic curve (Curve25519) | Module lattice (FIPS 204) |
| Shor's algorithm | Recovers the private key | No known quantum attack |
| Public key | 32 bytes | 1,952 bytes |
| Signature | 64 bytes | 3,309 bytes |
| Used by | Every Solana wallet | Every Quant's provenance |
What's quantum-proof here, and what isn't.
Post-quantum: the provenance
Every Quant's art and traits are hashed and signed with ML-DSA-65. The public key and all 1,000 signatures are published, and /verify checks them in your browser. A quantum computer can't forge a new one.
Still ed25519: your wallet
Ownership lives on Solana, and every Solana address is an ed25519 key. We can't change that from an NFT. Solana's client teams are working on Falcon signatures, and Blueshift's Winternitz Vault already protects funds with hash-based signatures today.
Off-chain on purpose
An ML-DSA-65 signature plus its key is 5,261 bytes, bigger than a whole Solana transaction. So the check runs client-side against published files, not in a program. Anyone can rerun it, forever.
Hold $QUANTS. Get a Quant.
- 1
Hold 100,000 $QUANTS
While the first 250 last, a keeper mints one straight to every new wallet holding at least 100,000 $QUANTS. No site, no signature.
- 2
Then the gate: 1,000,000 $QUANTS
After that, connect, sign a one-time ownership message, and we check your balance live on-chain at mint time. No snapshots, no staking.
- 3
One Quant per wallet, free
Your Quant is drawn at random from what's left and minted to you as a Metaplex Core NFT. The studio covers the fees.
Live supply
Ticks over in real time as Quants get minted. When the bar fills, all 1,000 have collapsed into wallets.
Tinfoil hats are common. Prism skin is not.
Every Quant is a 32 by 32 pixel critter built from stacked trait layers, rendered by code and checked for duplicates by hash. Rarity is the sum of how unlikely its traits are.
The short version
So is my wallet quantum-proof now?
No. Your wallet is an ed25519 key like every Solana wallet. What's post-quantum is the Quant's provenance: a signature a quantum computer can't forge. We'd rather tell you that than sell you a fantasy.
Can a quantum computer break crypto today?
No. The largest elliptic-curve key publicly broken on quantum hardware is 15 bits. Real keys are 256. The worry is that published estimates for what it takes keep shrinking.
Do I keep my $QUANTS?
Yes. The gate only reads your balance at mint time. Nothing is staked, locked, or moved.
Observe one. Collapse it into your wallet.
Hold $QUANTS, connect, and mint before the supply runs out. One per wallet.