pqc.market is a Solana-based protocol for launching tokens on pump.fun with post-quantum cryptographic attestations. Its official website (https://pqc.market/) describes a system where every token launch is signed using hash-based, one-time Winternitz One-Time Signatures (WOTS) arranged in an XMSS-style Merkle tree—deriving identity from a user’s Solana wallet without introducing new seed phrases. The native token contract resides on Solana at address 7K52aYQW9rWGjwZmQ7o2d1P6E7bji6hSMsqaLy5EcxLh, and is visible on explorers including Solscan (https://solscan.io/token/7K52aYQW9rWGjwZmQ7o2d1P6E7bji6hSMsqaLy5EcxLh) and Intel ARKM (https://intel.arkm.com/explorer/token/pqc-market). Technical documentation (https://pqc.market/docs) details the full stack: deterministic key derivation via HKDF from ed25519 signatures, SHA-256–based primitives, on-chain anchoring via SPL Memo instructions, and optional passphrase-hardening. The protocol supports multiple NIST-standardized schemes—including ML-DSA, SPHINCS+, and Falcon—certified once by the root WOTS key. Critical open questions include whether the quantum vault program (DNsPfPecrbnS7jFqMpEDG3VoWAdkuaU2VxsmaPENcg9F) has undergone independent audit, how leaf reuse is enforced across client and server layers, and whether the claimed 256-launch capacity per identity is enforced immutably on-chain or relies on centralized database integrity.
pqc.market delivers a technically rigorous, on-chain post-quantum identity layer built atop Solana and tightly integrated with pump.fun. Its core innovation—WOTS+Merkle identities anchored via on-chain SPL Memo and embedded in IPFS-hosted metadata—is fully specified and implemented client-side, as confirmed by static documentation and live site text. The protocol is self-contained: no secrets leave the browser, registration binds wallet and root bidirectionally, and every coin launch carries a verifiable attestation that anyone can validate offline using only SHA-256.
Verified integration: The project is live on pump.fun, with its token contract (
7K52aYQW9rWGjwZmQ7o2d1P6E7bji6hSMsqaLy5EcxLh) confirmed on Solscan and Intel ArkM. The docs explicitly describe how launches compile against pump.fun’s address lookup table and enforce constraints (fee payer, mint, program invocation) before broadcasting—indicating operational integration beyond logo placement.User value depth: Each launch provides quantum-resistant provenance, not just branding—it ties the mint keypair to a one-time WOTS leaf and pins the full signature in metadata. This enables independent verification of origin long after ECDSA breaks. However, the quantum vault program (
DNsPfPecrbnS7jFqMpEDG3VoWAdkuaU2VxsmaPENcg9F) is documented but lacks on-chain verification of deployment or usage in the supplied evidence.The ecosystem reliance is narrow—exclusively Solana and pump.fun—with no reciprocal commitments or multi-chain expansion evidenced. Token metrics show full circulating supply but no revenue, user growth, or treasury transparency. Confidence is medium: documentation and on-chain presence are current and consistent, but absence of third-party verification (e.g., audit, transaction traces, or social traction) limits strength.
Overall score: 7/10 Confidence: Medium