BUNKERLock your SOL behind hashes.
Bunker Protocol is a proposed vault for Solana where withdrawals are authorized by hash-based signatures instead of the elliptic-curve keys every wallet uses today. Hash functions are expected to hold up when quantum computers arrive. The vault design separates withdrawal authorization from ordinary wallet keys.
Four steps. No curves.
A bunker only ever stores a hash. To open it you prove you know what that hash came from.
Generate
Your browser creates a secret and hashes it, again and again, into one 32-byte commitment. The secret never leaves your device.
Seal
You deposit SOL into a bunker that only knows the commitment. No public key that a quantum computer could attack.
Unlock
To withdraw, you sign the exact withdrawal with a one-time signature. The program re-hashes it and checks it lands on the commitment.
Rotate
Every unlock also commits to your next key. A used key is worthless, so a revealed signature can't be replayed or reused.
Wallet vs bunker
Every Solana wallet signs with ed25519. A large enough quantum computer running Shor's algorithm could recover a private key from its public key. Hash-based signatures don't have that weakness.
| Normal wallet (ed25519) | Bunker (hash-based) | |
|---|---|---|
| Security rests on | Elliptic curve math | Hash functions only |
| Quantum computers | Broken by Shor's algorithm | Only a square-root speedup (Grover) |
| Public key on-chain | Visible forever | Only a hash commitment |
| Key reuse | Same key for life | One key per withdrawal, then rotate |
| Signature size | 64 bytes | ~2 KB (the price of safety) |
Protocol identity
Where we are
Design, site and the in-browser key lab.
Bunker program on devnet. Create, seal, unlock, rotate.
Independent review of the program and the signing code.
Bunkers open on mainnet, starting with deposit caps.
Sign with hashes
Make a one-time key, sign a message and verify it, all in your browser.
OPEN → DocsHow it works
The threat, Winternitz chains and how a bunker unlocks.
READ → RisksRead first
This is a proposal. Nothing is audited or live on mainnet yet.
READ →Network telemetry
—LAST CHECKAwaiting responseLive network data from the Solana public devnet endpoint. A connectivity readout, separate from vault execution.