Rotor protects your SOL, tokens and tokenized stocks with hash-based signatures that quantum computers can’t break, and a fresh key for every transaction.
Rotor replaces the elliptic-curve keys every other wallet depends on with hash-based one-time signatures. Here’s the whole idea in four steps.
Normal wallets derive a public key from a private key using elliptic-curve math. Going forward is easy and going back is impossible, for today’s computers.
Shor’s algorithm lets a large quantum computer go back. Because your address is published on-chain, anyone can collect it today and crack it the day that machine exists.
Rotor uses Winternitz one-time signatures: chains of SHA-256 hashes. Your secret is the start of each chain; your vault stores only a fingerprint of where the chains end.
To sign, your phone reveals a point partway along each chain. The program finishes the chains and checks they land on the fingerprint. There is no curve and no group structure, so there’s nothing for Shor’s algorithm to grab onto.
A one-time key must sign exactly once. So every Rotor transaction signs with the current key and, in the same step, switches the vault to the next one.
All keys come from your 24 words, so backup and recovery stay simple. On-chain reservations make sure two of your devices can never use the same key at once.
Funds live in a program-owned vault on Solana. There’s no elliptic-curve key behind it to crack, steal or phish. The only way in is a valid hash signature from your device.
Solana fees still need an ordinary key, so a tiny gas wallet pays them. It holds pocket change and has no power over your funds.
Quantum computers running Shor’s algorithm can turn a public key into its private key. On Solana your address is your public key, published for anyone to collect today and crack tomorrow. Rotor never relies on that math.
| Regular wallet | Rotor vault | |
|---|---|---|
| Signature scheme | Ed25519 (elliptic curve) | Winternitz one-time (SHA-256) |
| Shor's algorithm | Recovers the private key from the address | Doesn't apply: no curve, no group structure |
| Public key on-chain | Your address is your public key | Only a hash commitment, rotated every send |
| Key reuse | Same key for years | Each key signs exactly once |
| If ed25519 breaks | Funds can be taken | Vault funds stay locked to your hash keys |
Start with the wallet today. Swap, cold storage and bridging are coming, all on the same quantum-safe vault.
Rotor WalletA quantum-safe mobile wallet for SOL, tokens and tokenized stocks.
Rotor SwapSwap any Solana token at the best route, straight from your vault. No hot wallet in between.
Rotor Cold WalletAir-gapped storage for long-term holdings. Keys are created and used offline, and you sign by scanning a QR code.
Rotor BridgeMove assets from Ethereum and other chains straight into a Rotor vault on Solana.
Your funds sit in a program-owned vault on Solana. Nothing can move them except the Rotor program, and it obeys only your hash signature.
Your phone signs each transfer with a Winternitz one-time signature built purely from SHA-256. It's verified on-chain, in the same transaction.
The program retires the key you just used and switches to the next one. All keys come from your 24 words, so recovery stays simple.
Create a quantum-safe vault in under a minute, right in your browser. Your recovery phrase is encrypted on your device and never sent anywhere. Mobile apps are coming soon.
Rotor is a self-custody wallet for Solana that protects your funds against quantum computers. Your SOL, tokens and tokenized stocks live in an on-chain vault that can only be moved with hash-based one-time signatures, never with an ordinary elliptic-curve key.
Almost every wallet today (Phantom, MetaMask, Ledger) signs with elliptic-curve cryptography. A large enough quantum computer running Shor's algorithm can derive the private key from a public key, and on Solana your address is your public key, so it's already visible to everyone.
Funds are held by a program-derived address that has no private key. The Rotor program only releases funds when it sees a valid Winternitz one-time signature, which relies purely on SHA-256 hashing. Quantum computers get no shortcut against it. After every transaction the vault switches to a fresh key, and the old one is retired forever.
Solana network fees still have to be paid by an ordinary key, so Rotor keeps a tiny separate gas wallet that holds only fee money. It has no authority over your vault: if it were ever compromised, the worst case is losing a few cents of fees.
No, and you shouldn't try. Other wallets can't produce Rotor's quantum-safe signatures, so they'd open an empty, different wallet. Only ever enter your recovery phrase or Rotor private key in Rotor.
SOL, any SPL or Token-2022 token, and tokenized stocks such as xStocks. Rotor shows logos and prices for verified tokens, and you can import any token by its mint address.
Your funds live on the Solana blockchain, not with us. Your 24-word phrase deterministically recreates every key, so your vault can always be recovered with the open protocol and a compatible client.