sources so nobody has to take my word
Ledger 2020: ledger.com/message-ledgers-c…
Ledger Recover quote: CoinDesk, 23 and 24 May 2023
Connect Kit: ledger.com/blog/security-inc…
Trezor Safe 3: trezor.io/vulnerability/donj…
Coldcard: thehackernews.com/2026/08/co…
SafePal: thehackernews.com/2026/08/sa…
Trezor 2024 and 2026, Ledger 2026: BleepingComputer
Tangem: tangem.com blog, 30 Dec 2024
qUSB is the first full self-custody cold wallet for your $SOL that you can make from any USB stick, and it's quantum-proof
No chip, no vendor. It signs with hashes instead of curves, and an open-source Solana program checks every signature on-chain
$qUSB fees pay the dev to build it
qusb.app
$qUSB
CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
@solana @toly @solana_devs
qUSB is the first full self-custody cold wallet for your $SOL that you can make from any USB stick, and it's quantum-proof
No chip, no vendor. It signs with hashes instead of curves, and an open-source Solana program checks every signature on-chain
$qUSB fees pay the dev to build it
qusb.app
$qUSB
CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
@solana @toly @solana_devs
quick note for anyone here for the pump:
I don't launch often, only when I've got something worth building, last time was $SAM, ot hit almost $4M at its peak, and I worked on it nonstop for 3–4 months with no supply, just the creator fees
I'm saying this for those of you who care about the token more than the tech, that's fine, because there's no tech without the token
the token makes the fees, and the fees pay for me to build, simple as that
$qUSB 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
I built a cold wallet you can make out of any USB stick. It's called qUSB, and it's quantum-proof
qusb.app
$qUSB
here's the problem in plain words
every Solana wallet today is protected by the same kind of math: elliptic curves, that includes Phantom, Backpack, your Ledger, all of them, y our public address is out in the open, and right now nobody can work backwards from it to your private key, normal computers would need longer than the universe has existed
big enough quantum computer changes that
there's a known algorithm, Shor's, that does exactly this: public key in, private key out, obody can tell you the date that machine shows up, ut when it does, every wallet built on curves is open, and moving your coins after the fact won't help if someone gets there first
so I built a wallet that doesn't use curves at all
qUSB signs with hashes instead, using Winternitz one-time signatures over SHA-256, hash-based signatures are the boring, well-understood kind of post-quantum crypto
quantum computer has no shortcut against them, with no curve, there's nothing for Shor to break
how it works:
1. take any USB stick from your drawer. No special hardware, no chip, no company
2. flash it with qUSB. It holds an encrypted keystore and the wallet program
3. run qusb init. You get 24 words and set a passphrase, and your keys are encrypted on the stick
4. qusb receive gives you a vault address. Send SOL to it from any wallet or exchange
5. to spend, you sign offline with the stick, then broadcast from any online computer, signed message is locked to one recipient and one amount, so the online machine can't redirect your funds
the vaults live on Solana, small open-source program called qvault checks the hash-based signature on-chain before any SOL moves, there's no admin key and no backdoor over your funds
lose the stick? everything comes back from your 24 words, someone steals the stick? without your passphrase they get encrypted noise
What it doesn't do (I'd rather you hear it from me):
- It's v1 and not audited yet
- each vault key signs exactly once, wallet handles this and moves your change to the next vault
- Fees and SPL tokens still use a normal Solana key, as every wallet today, keep only fee money there
- If the computer you sign on has malware, it can see your keys while you sign, use a machine you trust
the full threat model is in the repo
why a token?
I want qUSB to be the first serious open-source software with no financial dependency on anyone, no VC, no sales team, no paid marketing
$qUSB is how it gets funded: the creator fees pay me and it
that's it, he token gives no claim on anything, and the code stays open source whatever happens
If you've used SAM, you know I ship open source. This is the next one
code: github.com/prfagit/qusb
qvault program: CnfS7soDNtZaJgshcU38tvDuK2zZZwFPAedRUdRm
read the code, plug it in
CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
🔐 Just locked 29,850,746 $qUSB tokens with @Streamflow_Fi
It's on-chain. You can check the amount, time-period and recipients.
Check it out👇
app.streamflow.finance/contr…
why I built qUSB, in plain words
your crypto wallet is protected by math that a big enough quantum computer can break, on Solana it's worse than most: your address IS your public key, the exact thing that machine needs. It's been public since the day you made your wallet
nobody knows the exact year that machine arrives, ut the estimates keep shrinking, the hardware keeps improving, and governments already have deadlines to move off this math
and a blockchain can't be fixed after the fact. When that day comes, whoever gets there first goes through the public keys, and yours is already on the list
qUSB moves your SOL behind different math, hash-based signatures, which a quantum computer has no shortcut for, program on Solana checks that signature before anything moves
and you don't buy a device, any USB stick from your drawer becomes the wallet, no company, no chip, fully open source
qusb.app
I built a cold wallet you can make out of any USB stick. It's called qUSB, and it's quantum-proof
qusb.app
$qUSB
here's the problem in plain words
every Solana wallet today is protected by the same kind of math: elliptic curves, that includes Phantom, Backpack, your Ledger, all of them, y our public address is out in the open, and right now nobody can work backwards from it to your private key, normal computers would need longer than the universe has existed
big enough quantum computer changes that
there's a known algorithm, Shor's, that does exactly this: public key in, private key out, obody can tell you the date that machine shows up, ut when it does, every wallet built on curves is open, and moving your coins after the fact won't help if someone gets there first
so I built a wallet that doesn't use curves at all
qUSB signs with hashes instead, using Winternitz one-time signatures over SHA-256, hash-based signatures are the boring, well-understood kind of post-quantum crypto
quantum computer has no shortcut against them, with no curve, there's nothing for Shor to break
how it works:
1. take any USB stick from your drawer. No special hardware, no chip, no company
2. flash it with qUSB. It holds an encrypted keystore and the wallet program
3. run qusb init. You get 24 words and set a passphrase, and your keys are encrypted on the stick
4. qusb receive gives you a vault address. Send SOL to it from any wallet or exchange
5. to spend, you sign offline with the stick, then broadcast from any online computer, signed message is locked to one recipient and one amount, so the online machine can't redirect your funds
the vaults live on Solana, small open-source program called qvault checks the hash-based signature on-chain before any SOL moves, there's no admin key and no backdoor over your funds
lose the stick? everything comes back from your 24 words, someone steals the stick? without your passphrase they get encrypted noise
What it doesn't do (I'd rather you hear it from me):
- It's v1 and not audited yet
- each vault key signs exactly once, wallet handles this and moves your change to the next vault
- Fees and SPL tokens still use a normal Solana key, as every wallet today, keep only fee money there
- If the computer you sign on has malware, it can see your keys while you sign, use a machine you trust
the full threat model is in the repo
why a token?
I want qUSB to be the first serious open-source software with no financial dependency on anyone, no VC, no sales team, no paid marketing
$qUSB is how it gets funded: the creator fees pay me and it
that's it, he token gives no claim on anything, and the code stays open source whatever happens
If you've used SAM, you know I ship open source. This is the next one
code: github.com/prfagit/qusb
qvault program: CnfS7soDNtZaJgshcU38tvDuK2zZZwFPAedRUdRm
read the code, plug it in
CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
I built a cold wallet you can make out of any USB stick. It's called qUSB, and it's quantum-proof
qusb.app
$qUSB
here's the problem in plain words
every Solana wallet today is protected by the same kind of math: elliptic curves, that includes Phantom, Backpack, your Ledger, all of them, y our public address is out in the open, and right now nobody can work backwards from it to your private key, normal computers would need longer than the universe has existed
big enough quantum computer changes that
there's a known algorithm, Shor's, that does exactly this: public key in, private key out, obody can tell you the date that machine shows up, ut when it does, every wallet built on curves is open, and moving your coins after the fact won't help if someone gets there first
so I built a wallet that doesn't use curves at all
qUSB signs with hashes instead, using Winternitz one-time signatures over SHA-256, hash-based signatures are the boring, well-understood kind of post-quantum crypto
quantum computer has no shortcut against them, with no curve, there's nothing for Shor to break
how it works:
1. take any USB stick from your drawer. No special hardware, no chip, no company
2. flash it with qUSB. It holds an encrypted keystore and the wallet program
3. run qusb init. You get 24 words and set a passphrase, and your keys are encrypted on the stick
4. qusb receive gives you a vault address. Send SOL to it from any wallet or exchange
5. to spend, you sign offline with the stick, then broadcast from any online computer, signed message is locked to one recipient and one amount, so the online machine can't redirect your funds
the vaults live on Solana, small open-source program called qvault checks the hash-based signature on-chain before any SOL moves, there's no admin key and no backdoor over your funds
lose the stick? everything comes back from your 24 words, someone steals the stick? without your passphrase they get encrypted noise
What it doesn't do (I'd rather you hear it from me):
- It's v1 and not audited yet
- each vault key signs exactly once, wallet handles this and moves your change to the next vault
- Fees and SPL tokens still use a normal Solana key, as every wallet today, keep only fee money there
- If the computer you sign on has malware, it can see your keys while you sign, use a machine you trust
the full threat model is in the repo
why a token?
I want qUSB to be the first serious open-source software with no financial dependency on anyone, no VC, no sales team, no paid marketing
$qUSB is how it gets funded: the creator fees pay me and it
that's it, he token gives no claim on anything, and the code stays open source whatever happens
If you've used SAM, you know I ship open source. This is the next one
code: github.com/prfagit/qusb
qvault program: CnfS7soDNtZaJgshcU38tvDuK2zZZwFPAedRUdRm
read the code, plug it in
CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump









