EternaX Vault, the post-quantum secure, crypto-agile vault for institutions and platforms
Make digital assets post‑quantum secure today, without waiting for custodians or chains.
A post-quantum secure vault for your institution and every client you serve, on Ethereum and EVM chains. Payments are signed by the HSMs, MPC or custodians you already use. EternaX never holds keys or funds.
- Bunker mode ready
- Under $1 per payment
- NIST SLH-DSA and ML-DSA
- Crypto-agile
- Ethereum and EVM chains
Live on testnetPilots open for institutions and platforms. Try the demo.
Use cases
Built for institutions that hold digital assets, and those that serve clients who do
Wealth and private banking
Protect: each client's assets in their own vault.
“Your digital assets sit in a post-quantum secure vault, approved by you, your adviser and your custodian.”
Custodians, fintechs and exchanges
Protect: client accounts, cold storage and reserves.
“We offer post-quantum secure vaults today, without waiting for the industry to migrate.”
Funds and asset managers
Protect: fund holdings, with your custodian as an approver.
To investors: “Fund assets can't be moved by a forged or quantum-broken key.”
Treasuries and DAOs
Protect: balance-sheet holdings and protocol treasuries.
To your board: “Our treasury is post-quantum secure, and we didn't change custodian.”
Tokenization platforms
Protect: one allowlisted vault per investor.
“Your tokenized holdings are protected by NIST post-quantum signatures.”
Stablecoin and token issuers
Protect: mint, upgrade, freeze and reserve roles.
To holders and regulators: “No forged key can mint, upgrade or freeze.”
Per-client vaults for wealth managers, banks and fintechs are offered through design-partner pilots.
Why now
Bunker mode for institutions
On 7 October 2026, Ethereum Foundation researcher Justin Drake warned that ECDSA could break before quantum computers arrive, possibly within months, as AI speeds up mathematics.
Hiding keys protects idle funds, but institutions sign every day. EternaX Vault makes their assets post-quantum secure now, without a rushed migration.
“Today I call upon the blockchain industry to calmly begin planning for ‘bunker mode’.”
Last reviewed 15 October 2026
How it works
A vault you own, approved by keys you already control
Your HSM or MPC signs
Approvers sign with SLH-DSA or ML-DSA: your team, clients, custodian or any mix.
Two independent checks
Funds move
Within your limits, address book and time locks, with a tamper-evident audit trail.
- 1
Generate keys
Approvers create post-quantum keys in your HSM or MPC.
- 2
Deploy and verify
The migration tool proves the vault is genuine before any funds move.
- 3
Move assets in
Every payment now needs your quorum's post-quantum approval.
What a post-quantum payment costs on Ethereum
October 2026: gas about 0.08 gwei, ETH about $2,430On a $1 million payment, that's less than 0.0001% of the amount.
Network fees per payment with an initiator and two approvers. About $11 if gas rises to 1 gwei. *ML-DSA estimated from measured per-signature costs.
Security
Stolen keys can't move your funds
Four attacks, one result: your funds stay in the vault.
One approver key is stolen
Funds stayPayments need a quorum and a second approval the key doesn't carry.
A quorum of keys is stolen
Funds stayThe second approval comes from shares held apart from signing keys.
A quantum or AI attacker
Funds stayOnly SLH-DSA or ML-DSA is accepted. There's no ECDSA path to forge.
The dashboard is hacked
Funds stayIt holds no keys. Each approver's own app re-checks every payment.
- Quorums
- Limits
- Address book
- Time locks
- Freeze
- Sanctions hook
- Post-quantum connections
- No upgrade backdoor
What it supports
Your chains, your tokens, your hardware
Chains
Ethereum is recommended for post-quantum claims; other chains keep their own validator and bridge security.
Signatures and signers
Classical MPC isn't post-quantum: keep it as your approval workflow, with the post-quantum key in your HSM. Vendor names reflect published support, not partnerships.
Tokens
Examples, not endorsements. Permissioned tokens need the issuer to allowlist your vault; token contracts stay under their issuers.
Crypto-agile by design
Algorithms change. Your vault doesn't.
Each algorithm change is a governed key rotation in the same vault, not a new vault or another migration.
Run today's standards
SLH-DSA by default, ML-DSA for HSM and MPC signers.
Add a scheme
New modules pass a self-test and an activation window.
Rotate approvers
Mixed quorums keep payments flowing.
Retire what weakens
A security floor removes weakened schemes.
Algorithm diversity
Approvers can hold SLH-DSA and ML-DSA keys together, surviving a break of either.
Safety rails
New schemes wait 7 days with a single-approver veto. Strength only goes up; classical schemes are refused.
Evidence
Built on published research and NIST standards
On Ethereum, chain consensus and token issuers' own keys stay outside the vault's protection.
Request your vault readiness map
Share your work email and institution. We'll map which keys to protect first and scope a 30-day pilot from kickoff, with a capped first deployment. No production funds needed.
- Days 1 to 5Exposure map
- Days 6 to 15Post-quantum keys and testnet vault
- Days 16 to 25Capped mainnet vault
- Days 26 to 30Board-ready decision pack
EternaX Vault: post-quantum secure vault for institutions and platforms (EternaX Labs) Why now: On 7 Oct 2026, Ethereum Foundation researcher Justin Drake called for "bunker mode" planning, warning ECDSA could break before quantum computers arrive. Every key we sign with has an exposed public key. What it is: a post-quantum secure vault we govern on Ethereum or any EVM chain, for our own holdings or one per client. ETH, stablecoins (USDC, USDT) and any ERC-20 leave only with NIST post-quantum signatures (SLH-DSA or ML-DSA) from our existing HSM or MPC. We don't have to wait for our custodian or the chain to migrate. What stays: our custodian, HSMs, agreements, chain and assets. EternaX never holds keys or funds. Crypto-agile: future algorithm changes are key rotations, not a new vault. Cost: under $1 in network fees per payment at October 2026 gas prices (about $11 if gas rises to 1 gwei). Status: live on testnet; pilots open for institutions and platforms. https://eternax.ai/post-quantum-vault.html
FAQ
EternaX Vault, answered
Sources
- Decrypt, Justin Drake on bunker mode, 7 Oct 2026. decrypt.co
- NIST FIPS 205 (SLH-DSA) csrc.nist.gov and FIPS 204 (ML-DSA) csrc.nist.gov
- Entrust nShield 5c datasheet. entrust.com
- Encryption Consulting, HSM PQC readiness, 2026. encryptionconsulting.com
- Thales Luna product briefs. thalesgroup.com, thalestct.com
- PKI Consortium, PQC Capabilities Matrix. pkic.org
EternaX Labs is not a custodian and does not provide legal, investment or regulatory advice. Token and vendor names are examples of compatibility, not endorsements, partnerships or certifications.