Good questions.
Short answers. For the long ones, see the docs.
What is this?
A savings vault for SOL. Depositing works from your normal wallet, but withdrawing needs a second, hash-based signature made from a separate 24-word vault phrase. Your wallet key alone can't move the funds.
Why would I want that?
Solana wallets use elliptic-curve keys (ed25519). A large enough quantum computer could work those keys out from public addresses. The vault's withdrawal key is built only from hash functions, which quantum computers aren't known to break. It also means a stolen or leaked wallet key isn't enough to empty the vault.
Is the vault phrase the same as my wallet's seed phrase?
No. It's a separate 24-word phrase the app makes in your browser just for the vault. Never import it into a wallet app, and never use your wallet's phrase as a vault phrase.
Is the 24-word phrase itself quantum-safe?
It's turned into keys using only hash functions and has 256 bits of entropy, so the best known quantum attack still leaves about 2^128 guesses. The full answer.
What if I lose the vault phrase?
The vault is gone for good. Nobody can reset it or recover it for you. Back it up before you deposit.
What if someone steals my wallet?
They can't withdraw from the vault: that needs a signature from the vault phrase. Your normal wallet only pays fees and sends deposits.
What if someone steals my vault phrase?
They can withdraw. The phrase is the key to the vault, quantum computer or not. Keep it offline and private.
Why does my vault address change after a withdrawal?
Each one-time key can sign only once. So every withdrawal spends the live key, pays you, and moves the rest into a new vault opened with the next key, all in one transaction. Your phrase covers every future key, so there's nothing new to back up. How the roll works.
What happens if a withdrawal fails?
Nothing moves. The app retries with the exact same signed message, or moves to the next key. It never signs two different messages with one key, because that could let someone forge a third.
Who pays the fees?
Your normal wallet pays Solana's network fees. It can't redirect funds: the amount and the recipient are inside the message your vault phrase signs.
What if I send SOL straight to the vault address?
It arrives: Solana can't block plain transfers. It counts as part of the vault, and you can withdraw it like any deposit.
Can I open my vault on another device?
Yes. Enter your vault phrase on recover. The app derives your keys and finds the live vault on chain. No server or account is involved.
Does the site store or send my phrase?
No. The phrase stays in your browser while you sign and is cleared afterward. It isn't saved, logged or sent anywhere.
Is it live on mainnet?
Yes. Vaults hold real SOL. The program's upgrade key is removed once the launch checks pass, so nobody can change the program under your vault.
Is there a token? Do I need it?
A token may launch on pump.fun. You don't need it: the vault is free for everyone, with no holder gate.