5.0 QWallet
Self-custody, every transaction signed under ML-DSA-87.
A self-custody wallet where every transaction is signed under ML-DSA-87 — swap, stake, bridge, and recover socially, without a custodian.
Claim scope ML-DSA-87 signs the QERYX approval layer: every transaction approval and device co-sign is attested before broadcast. On-chain signatures remain the network's native scheme today — Schnorr, through Q-Threshold — and BIP360 P2MR is the on-chain post-quantum address path.
- FIPS 204 — ML-DSA-87 approval signatures
- BIP360 — P2MR post-quantum addresses
- approval layer ML-DSA-87
- co-signing Q-Threshold t-of-n
- social recovery SSKR
- PQ addresses P2MR
01 / THE APPROVAL — LIVE
Approve a transaction. Watch what actually signs.
Two of your three devices approve. One signature leaves.
QWALLET-APPROVAL v1 op send to bc1q…demo-recipient policy 2-of-3
········ ········ ········ ········ ········ ········ ········ ········- THIS PHONESTANDBY
- OFFLINE CARDSTANDBY
- TABLETSTANDBY
The digest is real SHA3-256 (FIPS 202) of the payload above, computed in your browser. The device co-signs and the aggregate signature are an authored illustration — ML-DSA-87 approvals and Q-Threshold signing run on your devices, never in a web page. Real ChaCha20-Poly1305 (RFC 8439), compiled from Rust to WebAssembly, running in your browser. Same primitive family as the QERYX protocol; demo build, not the shipped crypto-core module.
Approval sequence ready. Two of three devices will co-sign; one signature leaves.
02 / THE CUSTODY SPEC — LETTERED
Read the custody spec, section by section.
The approval layer — ML-DSA-87
Before anything is broadcast, QERYX attests it. Every transaction approval and every device co-sign is signed under ML-DSA-87 (FIPS 204) inside QERYX — an approval layer no stolen password can cross.
On-chain, your transactions carry the network's native signature scheme today — Schnorr, produced through Q-Threshold co-signing. BIP360 P2MR (pay-to-merkle-root) is the on-chain post-quantum address path.
- Approvals + co-signs
- ML-DSA-87 (FIPS 204)
- On-chain today
- network-native Schnorr via Q-Threshold
- PQ address path
- BIP360 P2MR
- Networks
- Bitcoin mainnet + Lightning
Threshold custody — Q-Threshold
Your wallet is a signing policy across your devices. Q-Threshold — FROST-style t-of-n Schnorr — splits signing so that any t of your n devices co-sign, and one signature emerges.
The verifier sees one signature; which t devices participated is not revealed. One stolen device cannot spend alone, and one lost device does not lose the wallet.
- Scheme
- FROST-style t-of-n Schnorr
- Output
- one aggregate signature
- Participation
- not revealed to the verifier
- Stolen device
- cannot spend alone
Social recovery — SSKR
Recovery is shares you hand to people you choose. SSKR splits recovery material so enough shares reconstruct the wallet and fewer reveal nothing.
There are no seed-phrase screenshot flows and no custodial reset. Without your shares, the wallet is unrecoverable — self-custody is symmetric.
- Scheme
- SSKR shares
- Reset path
- none — no custodian exists
- Shares lost
- unrecoverable, by design
No ecosystem account
QWallet does not use a System ID. Keys are generated and held on your devices; there is no account, and there is nothing for us to freeze, reset, or produce.
- Account
- none
- Keys
- generated + held on your devices
- QERYX holds
- no wallet accounts, balances, or keys
The feature surface
Swap, stake, and bridge ship at feature level in qwallet-core: quotes aggregated and compared, routes scored, slippage bounded before you approve. Every one of them ends in the same approval sequence above.
There is no custodian. Nothing exists to freeze, reset, or produce.
03 / THE NUMBERS — FOOTNOTED
Numbers carry footnotes or they do not ship.
t-of-n1
one signature out — no single device can spend
11
signature the verifier sees, whatever the device count
02
custodial accounts, balances, or keys held by QERYX
| Parameter | Value | Source |
|---|---|---|
| Approval signatures | ML-DSA-87 | FIPS 204 |
| Co-signing | Q-Threshold — FROST-style t-of-n Schnorr | crypto-core/src/q_threshold.rs |
| PQ address path | BIP360 P2MR | qwallet-core/src/bip360.rs |
| Recovery | SSKR shares | crypto-core/src/sskr.rs |
| Networks | Bitcoin mainnet + Lightning | qwallet-core |
04 / THE COUPLINGS — ONE CORE
Trace where the wallet touches the rest of the stack.
What the wallet shares, and with what
- CRYPTO-CORE · ONE RUST CORE — The same core signs here: ML-DSA-87, X25519, and ChaCha20-Poly1305 behind a single FFI surface.
- QVAULT · SEALED SECRETS — Secrets sealed under Argon2id and hybrid-wrapped ChaCha20-Poly1305.
- Q-RATCHET · THE MESSENGER — A fresh key for every message you send.
05 / THE VERDICT — CATEGORY COLUMNS
Set self-custody against a custodian and a single key.
| QERYX | Custodial wallet | Single-key self-custody | |
|---|---|---|---|
| Real workloads | |||
| Provider hacked | Nothing to take — no custodian | Funds and identity at custodian risk | Not included |
| Device stolen | t-of-n blocks single-device spend | Custodian password-reset race | Single key — total loss |
| Server subpoenaed | No custodial records exist | Custodian produces everything | Not included |
| Quantum horizon | ML-DSA-87 approvals + P2MR path | none none | none none |
| Recovery | SSKR shares — no escrow | Custodial reset (also the attack path) | Seed phrase or nothing |
06 / ACCESS — WITH ARMED
Take the wallet with the Armed tier.
How do I get QWallet?
QWallet ships with the Armed tier — one subscription arms the whole stack. Nothing is purchasable in this build: the app carries no checkout surface and no price. When the tier opens, revenue funds the stack; your transactions are never monetized. Read the tier ladder.
Switching from a custodial wallet?
Create your device set, choose your t-of-n policy, distribute SSKR shares to people you trust, then move funds to addresses whose keys only your devices have ever held. No custodian is asked for permission at any step.
07 / THE HARD QUESTIONS
Ask who holds the keys.
Do you hold my keys?
No. Keys are generated and held on your devices. There is no custodian, no account, and nothing for us to freeze or produce.
What if I lose a device?
Your threshold policy decides: t-of-n means one lost device does not lose the wallet, and one stolen device cannot spend alone.
What if I lose everything?
SSKR social recovery from the shares you distributed. Without them, the wallet is unrecoverable — self-custody is symmetric.
What is post-quantum about a wallet?
Approvals and device co-signing are ML-DSA-87 attested; the BIP360 P2MR address path prepares on-chain post-quantum custody. Classical on-chain signatures remain the network's scheme today — we say so.
What can be handed over under subpoena?
Nothing custodial exists. On-chain data is public by nature; QERYX holds no wallet accounts, balances, or keys.
Why is there no free tier?
QWallet ships with Armed. Nothing is purchasable in this build; when the tier opens, subscription revenue funds the stack — your transactions are never monetized.