A proposed bunker solution for Solana

Lock your SOL behind hashes.

Bunker Protocol is a proposed vault for Solana where withdrawals are authorized by hash-based signatures instead of the elliptic-curve keys every wallet uses today. Hash functions are expected to hold up when quantum computers arrive. Today's wallet signatures are not.

Create a bunker Try the key lab

BUNKER CONSOLERUNNING IN YOUR BROWSER

WOTSWinternitz one-time signatures

SHA-256the only assumption: hashes are hard to reverse

1 KEY = 1 USEevery withdrawal rotates to a fresh key

DEVNET SOONproposal stage, not on mainnet yet

How a bunker works

Four steps. No curves.

A bunker only ever stores a hash. To open it you prove you know what that hash came from.

Generate

Your browser creates a secret and hashes it, again and again, into one 32-byte commitment. The secret never leaves your device.

Seal

You deposit SOL into a bunker that only knows the commitment. No public key that a quantum computer could attack.

Unlock

To withdraw, you sign the exact withdrawal with a one-time signature. The program re-hashes it and checks it lands on the commitment.

Rotate

Every unlock also commits to your next key. A used key is worthless, so a revealed signature can't be replayed or reused.

Why it matters

Wallet vs bunker

Every Solana wallet signs with ed25519. A large enough quantum computer running Shor's algorithm could recover a private key from its public key. Hash-based signatures don't have that weakness.

	Normal wallet (ed25519)	Bunker (hash-based)
Security rests on	Elliptic curve math	Hash functions only
Quantum computers	Broken by Shor's algorithm	Only a square-root speedup (Grover)
Public key on-chain	Visible forever	Only a hash commitment
Key reuse	Same key for life	One key per withdrawal, then rotate
Signature size	64 bytes	~2 KB (the price of safety)

not launched

The $BUNKER token

↗ Solscan ↗ pump.fun

Roadmap

Where we are

PHASE 0 · NOWProposal

Design, site and the in-browser key lab.

PHASE 1Devnet

Bunker program on devnet. Create, seal, unlock, rotate.

PHASE 2Audit

Independent review of the program and the signing code.

PHASE 3Mainnet

Bunkers open on mainnet, starting with deposit caps.

Key lab