EternaX Vault, the post-quantum secure, crypto-agile vault for institutions and platforms

Make digital assets post‑quantum secure today, without waiting for custodians or chains.

A post-quantum secure vault for your institution and every client you serve, on Ethereum and EVM chains. Payments are signed by the HSMs, MPC or custodians you already use. EternaX never holds keys or funds.

  • Bunker mode ready
  • Under $1 per payment
  • NIST SLH-DSA and ML-DSA
  • Crypto-agile
  • Ethereum and EVM chains

Live on testnetPilots open for institutions and platforms. Try the demo.

Use cases

Built for institutions that hold digital assets, and those that serve clients who do

Wealth and private banking

Wealth managersPrivate banksFamily officesRIAs

Protect: each client's assets in their own vault.

“Your digital assets sit in a post-quantum secure vault, approved by you, your adviser and your custodian.”

Custodians, fintechs and exchanges

CustodiansTrust companiesFintechsNeobanksExchanges

Protect: client accounts, cold storage and reserves.

“We offer post-quantum secure vaults today, without waiting for the industry to migrate.”

Funds and asset managers

Crypto fundsHedge fundsAsset managersMarket makers

Protect: fund holdings, with your custodian as an approver.

To investors: “Fund assets can't be moved by a forged or quantum-broken key.”

Treasuries and DAOs

ETH treasury companiesCorporatesDAOsFoundations

Protect: balance-sheet holdings and protocol treasuries.

To your board: “Our treasury is post-quantum secure, and we didn't change custodian.”

Tokenization platforms

Tokenization platformsTransfer agentsRWA issuers

Protect: one allowlisted vault per investor.

“Your tokenized holdings are protected by NIST post-quantum signatures.”

Stablecoin and token issuers

Stablecoin issuersToken issuersDeFi protocols

Protect: mint, upgrade, freeze and reserve roles.

To holders and regulators: “No forged key can mint, upgrade or freeze.”

Per-client vaults for wealth managers, banks and fintechs are offered through design-partner pilots.

Why now

Bunker mode for institutions

On 7 October 2026, Ethereum Foundation researcher Justin Drake warned that ECDSA could break before quantum computers arrive, possibly within months, as AI speeds up mathematics.

Hiding keys protects idle funds, but institutions sign every day. EternaX Vault makes their assets post-quantum secure now, without a rushed migration.

“Today I call upon the blockchain industry to calmly begin planning for ‘bunker mode’.”
Justin Drake, on X, 7 October 2026. Coverage. Quoted for context, not as an endorsement.

Last reviewed 15 October 2026

How it works

A vault you own, approved by keys you already control

  1. 1

    Generate keys

    Approvers create post-quantum keys in your HSM or MPC.

  2. 2

    Deploy and verify

    The migration tool proves the vault is genuine before any funds move.

  3. 3

    Move assets in

    Every payment now needs your quorum's post-quantum approval.

EternaX Vault screen for a payment of 3 ETH to Acme Metals. Highlighted: each member's post-quantum signature scheme (SLH-DSA or ML-DSA); each approval showing a verified signature and a verified second approval; the address-book, sanctions and limit checks; and the confirmation that the vault verified every signature on-chain.
A payment on testnet. Demo with sample data.

What a post-quantum payment costs on Ethereum

October 2026: gas about 0.08 gwei, ETH about $2,430
SLH-DSAHash-based default, 7.9 KB signature
$0.91
ML-DSALattice-based, 2.4 KB signature
$0.80*

On a $1 million payment, that's less than 0.0001% of the amount.

Network fees per payment with an initiator and two approvers. About $11 if gas rises to 1 gwei. *ML-DSA estimated from measured per-signature costs.

Security

Stolen keys can't move your funds

Four attacks, one result: your funds stay in the vault.

One approver key is stolen

Funds stay

Payments need a quorum and a second approval the key doesn't carry.

A quorum of keys is stolen

Funds stay

The second approval comes from shares held apart from signing keys.

A quantum or AI attacker

Funds stay

Only SLH-DSA or ML-DSA is accepted. There's no ECDSA path to forge.

The dashboard is hacked

Funds stay

It holds no keys. Each approver's own app re-checks every payment.

  • Quorums
  • Limits
  • Address book
  • Time locks
  • Freeze
  • Sanctions hook
  • Post-quantum connections
  • No upgrade backdoor

What it supports

Your chains, your tokens, your hardware

Chains

EthereumRecommended
Arbitrum OneEVM-compatible
BaseEVM-compatible
OP MainnetEVM-compatible
Polygon PoSEVM-compatible
BNB Smart ChainEVM-compatible
Avalanche C-ChainEVM-compatible
Private EVM networks (Hyperledger Besu)EVM-compatible

Ethereum is recommended for post-quantum claims; other chains keep their own validator and bridge security.

Signatures and signers

Signatures
SLH-DSA FIPS 205, defaultML-DSA FIPS 204
HSMs, SLH-DSA and ML-DSA
Entrust nShield 5Securosys PrimusFuturexMarvell LiquidSecurityCrypto4A
HSMs, ML-DSA
Thales LunaUtimacoThales TCT Luna T-Series
Classical MPC
FireblocksCopperDfns

Classical MPC isn't post-quantum: keep it as your approval workflow, with the post-quantum key in your HSM. Vendor names reflect published support, not partnerships.

Tokens

Native coins
ETHPOLBNBAVAXthe native coin of any supported chain
Stablecoins
USDC CircleUSDT TetherUSDS SkyPYUSD PayPalUSDe EthenaDAI
Tokenized funds and RWAs
BUIDL BlackRockUSTB SuperstateOUSG OndoXAUTPAXG
Wrapped and staked
WBTCWETHstETHwstETH
DeFi and governance
LINKUNIAAVEONDOany ERC-20
Issuer authority
Mint, upgrade, freeze and reserve roles, with EternaX Vault for Issuers

Examples, not endorsements. Permissioned tokens need the issuer to allowlist your vault; token contracts stay under their issuers.

Crypto-agile by design

Algorithms change. Your vault doesn't.

Each algorithm change is a governed key rotation in the same vault, not a new vault or another migration.

1

Run today's standards

SLH-DSA by default, ML-DSA for HSM and MPC signers.

2

Add a scheme

New modules pass a self-test and an activation window.

3

Rotate approvers

Mixed quorums keep payments flowing.

4

Retire what weakens

A security floor removes weakened schemes.

Unchanged throughout:vault addressassetsquorumpoliciesaudit history

Algorithm diversity

Approvers can hold SLH-DSA and ML-DSA keys together, surviving a break of either.

Safety rails

New schemes wait 7 days with a single-approver veto. Strength only goes up; classical schemes are refused.

Evidence

Built on published research and NIST standards

3 arXiv papersPost-quantum custody authorization, native-signature boundary and SILMARILS
NIST standardsSLH-DSA (FIPS 205) and ML-DSA (FIPS 204) signatures
Live on testnetRun a post-quantum approval in the public demo
Built by EternaX Labs: Dariia Porechna, cryptographer and author of the custody authorization papers Paarrthhh Birla, ex-Polygon, digital-asset strategy Dr. Chen Feng, University of British Columbia

On Ethereum, chain consensus and token issuers' own keys stay outside the vault's protection.

Request your vault readiness map

Share your work email and institution. We'll map which keys to protect first and scope a 30-day pilot from kickoff, with a capped first deployment. No production funds needed.

  1. Days 1 to 5Exposure map
  2. Days 6 to 15Post-quantum keys and testnet vault
  3. Days 16 to 25Capped mainnet vault
  4. Days 26 to 30Board-ready decision pack

Institutions and platforms of every size are welcome. Opens a pre-filled email to info@eternax.ai.

FAQ

EternaX Vault, answered

Sources

  1. Decrypt, Justin Drake on bunker mode, 7 Oct 2026. decrypt.co
  2. NIST FIPS 205 (SLH-DSA) csrc.nist.gov and FIPS 204 (ML-DSA) csrc.nist.gov
  3. Entrust nShield 5c datasheet. entrust.com
  4. Encryption Consulting, HSM PQC readiness, 2026. encryptionconsulting.com
  5. Thales Luna product briefs. thalesgroup.com, thalestct.com
  6. PKI Consortium, PQC Capabilities Matrix. pkic.org

EternaX Labs is not a custodian and does not provide legal, investment or regulatory advice. Token and vendor names are examples of compatibility, not endorsements, partnerships or certifications.