Quantum early warning · Ethereum L1

Quantum dashboard

Monitor on-chain quantum canaries, generate ML-DSA-44 post-quantum keys and prepare contract safeguards. Protection requires setup; monitoring is not a guarantee against quantum attacks.

Oracle threat level— / 05Waiting for Mainnet

Public quantum record15 bitof 256 needed · Apr 2026

Armed rungs intact—128 to 256 bit · on-chain

Your protection0 / 4steps done in this browser

Start here

1

Register a post-quantum key

Create an ML-DSA-44 key and commit its hash to QairosArk. This proves ownership after the Qairos Moment.

2

Save your recovery kit

Download the recovery file and keep it offline. It is the only way to recover after the breaker trips.

3

Protect your contracts

Use the Contract Wizard to build a vault or treasury that locks itself when the threat level rises.

04

Qairos Cryptography Challenge

Explore the planned Season 01 lineup, competition format and rules. Entries are not open yet.

Your checklist

Progress is stored only in this browser.

NetworkSettings

How Qairos works

The Qairos Moment is the first time an armed canary key breaks. It is recorded on-chain and every module reacts to it.

1 · Canary

Bounties on elliptic-curve keys. Breaking an armed key proves quantum capability.

2 · Oracle

Each armed break raises threatLevel() by one, on-chain.

3 · Guard

Contracts using QairosGuard lock themselves at their threshold.

4 · Ark

Owners recover funds with a post-quantum key committed before the Qairos Moment.

5 · Markets

Predictions and insurance settle from the oracle automatically.

Protect my assets

Register a post-quantum key

Your Ethereum key (ECDSA) will be breakable by a large quantum computer. Register a post-quantum key now; after the Qairos Moment it proves the account is yours.

1 Generate2 Commit3 Save kit

1Generate key

ML-DSA-44 (NIST FIPS 204), generated in this browser. Your keys never leave it.

Randomness source Quantum randomness comes from a quantum random number generator (QRNG). If it cannot be reached, Qairos falls back to browser randomness and tells you.

No key yet.

2Bind to your account

Your Ethereum addressThe account you want to protect. Send the transaction from this same address.

3Save recovery kit

Contains your PQ public key and salt. Anyone holding it can recover this account's vault balance after the Qairos Moment. Store it offline.

Commitment

keccak256(pqPublicKey ‖ salt ‖ account)

Generate a key and enter your address.

Public registry

This off-chain registry publishes your wallet address, commitment hash and UTC time. Publishing requires signing in with the same wallet. It does not register an on-chain Ark entry; use the transaction card for that. Keys, salt and recovery kits stay in your browser.

I agree to publish my address and commitment.

Account	Commitment	Added (UTC)

Protect my assets

Recover funds after the Qairos Moment

Once the breaker trips, QairosVault only releases funds through a two-step recovery that reveals your pre-Moment key. A quantum attacker cannot know it.

1 Load kit2 Commit3 Recover

When to use this

The oracle threat level has reached your vault's trip level.
Normal withdrawals now revert with QuantumBreakerTripped.
Send step 2, wait at least one block, then send step 3 to move the balance to a fresh address.

1Load recovery kit

Recovery kit file (.json)

No kit loaded.

2Destination

Fresh address to receive fundsUse a new post-quantum wallet or a never-used address.

Verify a commitment

Check that a kit matches what is stored on-chain, without sending anything.

On-chain commitment (bytes32)

—

Protect my assets

Sign with a post-quantum key

Create and check ML-DSA-44 signatures. Edit one character after signing and verification fails.

Key and message

Public key—

Secret key—

Signature—

Message

Create or load a key first.

Output

Key fingerprint

—

Public key

—

Signature

—

ECDSA signature: 65 bytes. ML-DSA-44: 2,420 bytes. This size gap is why Ethereum plans STARK-based signature aggregation.

Monitor the threat

Threat level

QairosOracle exposes one number, 0 to 5. It rises by one each time an armed canary key is broken. Read it on L1, then use the table to decide what to do.

Read the level on L1

Manual ABI decoder · paste a 32-byte result (not the live monitor)

Level0

StateNOMINAL

Do thisMONITOR

Event to watch

ThreatRaised(uint8 level, uint16 bits, address solver) · topic0

—

Response guide

Level	State	Meaning	Recommended action
0	Nominal	No armed key broken	Register a PQ key. Keep monitoring.
1	Watch	128-bit key broken	Move funds out of exposed EOAs. Default guards trip.
2	Watch	160-bit key broken	Stop using ECDSA-only accounts for value.
3	Critical	192-bit key broken	Recover vault balances via Ark.
4	Critical	224-bit key broken	Treat every exposed key as compromised.
5	Critical	secp256k1 broken	Ethereum account keys are breakable. Recover now.

Monitor the threat

Canary ladder

Twelve elliptic-curve challenges. Solve training rungs up to 40 bits here, run bounded searches locally, or verify an external solution on any rung. An armed break records a cryptographic break; the solution alone does not prove quantum hardware was used.

1 Pick rung2 Solve3 Claim

Ladderscript/Rungs.sol

#	Rung	Curve	Tier	Test mode

Solver · —

Solver idle · decorative scan only. Press Solve to search.

Group steps—

Estimate—

Raises level—

Result

Pick a rung.

Markets

Predict the Qairos Moment

Parimutuel markets settled by the oracle. This page runs a shared paper market with the exact payout math of QairosMarket; use the transaction card to take a real position on L1.

Marketsconnecting

Stake (ETH)

An anonymous, signed browser cookie keeps your paper positions across reloads for 30 days. These positions are not real ETH. You can delete your shared data below.

Live Mainnet pools · separate from paper positions

Loading Mainnet pools…

Take this position on L1

Pick YES or NO on a market to build the matching real transaction. The paper position on the left is a simulation; only the card below, confirmed in your wallet, touches L1.

Markets

Insure your exposure

QairosInsurance pays full coverage if the first armed break lands inside your term. Price follows the 256-bit market: 0.40% + implied YES × 5% per year.

Quote

Coverage (ETH)

Term: 2 years

Rate / yr—

Premium—

Payout—

The quote uses this page's paper market. On L1 the contract reads the live market; the card simulates with your wallet first; a stale premium shows WrongPremium and nothing is sent.

Build

Contract Wizard

Assemble a Qairos-protected contract the way you would in the OpenZeppelin Wizard. Pick a type and features; the wizard writes the contract, a Foundry test suite, a deploy script and a setup guide.

64 option sets compiled376 generated tests pass

—

Functions

Function	Who	Breaker	What it does

Security notes

For developers

ABI & calldata

Every Qairos function with its selector, computed live with keccak256. Build calldata for any call.

Functions

Selector	Function	Type

Builder

Select a function.

For developers

Contracts

Seven contracts, one library, deploy script and 23 Foundry tests. All pass. Not yet deployed to Ethereum mainnet.

Tests 23/23Local deployAuditMainnet

—

Deploy to Ethereum L1

forge test
forge script script/Deploy.s.sol \
  --rpc-url $ETH_RPC_URL \
  --account deployer --broadcast \
  --verify --etherscan-api-key $ETHERSCAN_KEY

The six Ethereum Mainnet contracts are configured in Network settings. They are not independently audited. Do not deposit real value before an audit.

Test resultsgas

Console

Run every Qairos tool from a terminal. Type help to see commands. The activity log on the right records each action in this session.

qairos · ethereum L1

Activity log

System

Network settings

The Ethereum Mainnet deployment is preconfigured. You can override addresses in this browser; transaction cards use the selected addresses and link to Etherscan.

Contract addresses · Chain 1

Quantum randomness (QRNG)not tested

The public legacy ANU quantum source is active through the server. An optional ANU_QRNG_API_KEY Secret selects ANU's recommended AWS service; no API key reaches this browser. If the source is unavailable, key generation explicitly falls back to browser Web Crypto.

—

Gas

Gas price for estimates (gwei)Check the current base fee before sending. Estimates use gas measured in the test suite.

How to send a transaction

Explorer: the official contracts have verified source on Sourcify and a Read / write link to Routescan. Etherscan source verification is pending its submission limit; its links show transactions only. Connecting a wallet and approving a transaction is your choice.
Qairos wallet: connect and sign in from the header, then use Review & send on a card. Qairos simulates with your wallet, shows contract, function, value and sender, and only your confirmation in the wallet sends. Nothing is sent automatically.
Foundry: copy the cast send command and run it with your keystore account.
Any wallet: send a transaction to the contract with the hex data shown on the card.