Quantos Lightpaper
Post-Quantum Layer 1 with Universal Finality
Version 2.2 — July 2026
1. In One Sentence
Quantos is a quantum-resistant Layer 1 blockchain that also acts as a Layer 0 — it exports post-quantum security to Ethereum, Solana, Sui, Aptos, NEAR, and every major chain.
2. The Problem
Quantum computers will break ECDSA, secp256k1, and Ed25519 — the cryptography behind Bitcoin, Ethereum, Solana, and virtually all blockchains. Most projects plan to retrofit PQC later. Quantos builds it from genesis.
3. Quantos Layer 1
Post-Quantum Cryptography (NIST-finalized)
| Algorithm | Standard | Security Level | Used For |
|---|---|---|---|
| ML-DSA-65 | FIPS 204 (Aug 2024) | NIST Level 3 | Transaction signatures, finality, cross-chain attestations |
| ML-KEM-768 | FIPS 203 (Aug 2024) | NIST Level 3 | Encrypted mempool, validator P2P encryption |
| Rescue-Prime + STARK VRF | Rescue-Prime hash + STARK proof | — | Unpredictable, grind-proof committee selection |
| SPHINCS+ | SPHINCS+ (NIST) | NIST Level 3 | Additional hash-based PQC operations |
All signatures, encryptions, and randomness are post-quantum from day one.
QuantumDAG Consensus
A 3-layer BFT consensus derived from peer-reviewed protocols (Narwhal, Bullshark, HotStuff-2):
- Layer 1 — DAG fast path: parallel transaction inclusion via a Directed Acyclic Graph (2–8 parents per vertex).
- Layer 2 — Committee BFT: small VRF-selected committees (21 validators) vote on ordering; 2-chain commit rule for fast finality.
- Layer 3 — Super-committee checkpoint: deterministic, irreversible finality every ~1 second.
Safety: runtime-checked invariants detect equivocation and attribute it for slashing. Liveness: guaranteed after GST (partial synchrony), with adaptive timeouts.
Dynamic Sharding
State is partitioned across 100–10,000 shards that auto-scale with load. Each shard runs its own DAG, committee, and mempool. Cross-shard transactions commit atomically via a STARK-verified 2-phase commit.
QuantosVM
Smart contracts execute in a WebAssembly (WASM) sandbox (Wasmer + Cranelift):
- Bytecode-invisible: deployed code is encrypted at rest; only a 32-byte hash is public.
- Multi-language: Solidity compiles to WASM via Solang; Ethereum ABI compatibility via ERC router.
- Parallel execution: transaction dependency graph + MVCC snapshot isolation + speculative execution.
Native Token Standards
First-class, protocol-level token standards with built-in safety (overflow, reentrancy, approval-race protection):
| Standard | Equivalent | Purpose |
|---|---|---|
| QN4 | ERC-20 | Fungible tokens |
| QN8 | ERC-721 | NFTs |
| QN12 | ERC-1155 | Multi-token |
Zero-Gas Execution (STACC)
No per-transaction gas fees. Users transact within a stake-proportional compute-unit (CU) quota. Persistent storage is priced via state rent (20% burned, 80% to validators). New users with zero stake can be sponsored by applications.
Sustainable Tokenomics
Validator rewards come from three sources that progressively shift away from inflation:
- Targeted inflation: 3–5% declining toward a 1% floor as staking rate approaches 67%.
- State rent: grows with adoption, projected to become the dominant revenue source within 3–5 years.
- Slash redistribution: 80% to honest validators, 20% burned.
4. Quantos Layer 0
The L0 is Quantos' finality hub. It lets any blockchain verify that Quantos has confirmed something — without trusting a third party.
How it works:
- Quantos cryptographically verifies a proof from an external chain (e.g. Ethereum sync committee, Bitcoin SPV).
- Quantos validators sign with ML-DSA-65.
- Signatures are aggregated off-chain and compressed into a 32-byte STARK commitment.
- Smart contracts on the target chain verify the commitment on-chain (cheap
SLOAD).
Honest trust model:
| Chain | Verification |
|---|---|
| Bitcoin, Ethereum, Cosmos | ✅ Cryptographic light-client |
| Solana, NEAR, Polkadot, TON, Cardano, Tezos, Stellar, Tron, Canton Network, Internet Computer | ⚠️ Oracle attestation (upgradable to crypto as light clients become available) |
Deployed on 14 chains — 9 with full PQC-Guard smart accounts, 5 with L0 verifier anchoring.
5. PQC-Guard: User Security
PQC-Guard is the smart-account system that lets users:
- Migrate funds via a 3-mechanism model: direct registration + proof-of-possession, 48h anti-theft delay with guardian alert, and social-recovery M-of-N for already-compromised accounts.
- Secure assets behind M-of-N attestations from Quantos validators (verified on-chain with WOTS hash-based signatures — no lattice arithmetic needed on destination chains).
- Recover funds via guardians if Quantos becomes unavailable (30-day timeout escape hatch).
Deployed on: Ethereum, Base, Solana, Sui, Aptos, NEAR, Stellar, Tron, Canton Network, Internet Computer.
6. Sidechains
Application-specific sidechains run custom runtimes (gaming, DeFi, private validator sets) while inheriting L1 economic security via a proof-of-stake bridge with periodic state commitments and fraud-proof dispute windows.
7. Ecosystem
On-chain application suite deployed on testnet:
- Vybss — Super-app with DEX (concentrated-liquidity AMM), stablecoin (SQTEST), bridge, lending, perpetual futures, restaking, predictions, NFT marketplace, and AI tools.
- SDKs — JavaScript/TypeScript L0 SDK, PQC-Guard SDK, and wallet extension SDK.
- Wallet Extension — Post-quantum key management (ML-DSA-65) for browser and mobile.
- Governance — On-chain DAO with stake-weighted voting, timelock execution, and treasury management.
8. Why It's Different
| Classic Approach | Quantos |
|---|---|
| Isolated L1 chain | L1 + L0 + sidechains interconnected |
| Expensive PQC retrofit | Native NIST-finalized PQC from genesis |
| Centralized bridges (multisig) | Cryptographic + STARK trustless verification |
| Per-transaction gas | Zero-gas + state rent |
| Each chain manages its own PQC | Quantos provides PQC to everyone |
9. Links
- Website: quantos.tech
- Docs: docs.quantos.tech
- Whitepaper: whitepaper.quantos.tech
- Code: github.com/Quantos-Labs/Quantos
- Ecosystem: vybss.com