Qatze — Security

Claims

Your words stay with youThe key is built in your browser. No request ever carries your 24 words.

Quantum-safe signaturesXMSS-SHA2_10_256, from RFC 8391 and NIST SP 800-208. SHA-256 only: nothing for Shor's algorithm.

Checked onchainThe box verifies every signature itself, on Robinhood Chain. No server in the way.

No admin over boxesNobody can freeze, upgrade or open a box. Not even us.

Box fees burn $QATA fifth feeds the canary, the rest buys $QAT and burns it. Nobody can take that ETH, not even us.

Every opening, re-checkablePaste any box opening on /verify: your browser checks it again, byte for byte.

Not audited by a third party. Start with an amount you can afford to test with.
Lose the 24 words, lose the box. Nobody can reset them. Keep two paper copies.
Malware is still malware. A device that holds both your wallet and your words can empty the box.
Q-Day mode trades a lock for access. Once it is on, anyone with your words can take everything, from any wallet.
The fee switch is ours. The factory admin sets the box fee and where it goes. Every change is public onchain.
Only what is inside. Tokens kept in an ordinary wallet get no protection.
Issuers keep their powers. USDG and stock token issuers can freeze their own tokens anywhere, boxes included. ETH can't be frozen.

Internal adversarial reviews, each with proof-of-concept tests. Every finding of medium severity or above is fixed. Details in the paper, Section 8.

ScopeFoundStatus

Contracts v11 high, 3 medium, 5 lowFixed in v2

Contracts v22 medium, 6 lowFixed in v3

v4 (Q-Day mode)Nothing medium or aboveLive

The furnace (fees → burn)4 low, 9 info, two roundsFixed

Web app2 high, 3 medium, 7 lowFixed

Web app, round 21 high, 2 medium, 4 lowFixed

Official vectorsSix signatures from the RFC authors' reference code, matched byte for byte. Check them.

82 contract testsFuzzing, every one-time key rule, every exploit the reviews wrote, and the furnace on a copy of Robinhood Chain.

36 end-to-end checksCreate, fill, swap, open, rotate, a 7-day recovery, Q-Day mode, a hand-over attack, on a copy of Robinhood Chain.

Real openingsBoxes opened on mainnet, re-checked in your browser. See one.

The canary is an address nobody holds a key for. If it ever moves, every box with alerts on hears it within minutes.