Vantax is post-quantum security for Solana, built in Rust.
THE PROBLEM
Every Solana wallet and transaction is signed with Ed25519. On Solana your address is your public key, so it is already public. A large enough quantum computer running Shor's algorithm can work out the private key from it. NIST published the replacement standards in 2024 (ML-DSA for signatures, ML-KEM for key exchange), and migrating takes years. Vantax exists to start that migration now.
THE SCANNER
Vantax finds the cryptography in a codebase that quantum computers will break: Ed25519, secp256k1, RSA, ECDH and more, across 20 primitive families. Every finding comes with what to replace it with, plus a full migration plan. It plugs into CI and fails the build when it finds something. On Solana's own official example programs it found 892 findings: not their mistake, that is how Solana works today.
HYBRID MODE
Important actions get two signatures: the normal Ed25519 one and a quantum-safe ML-DSA-87 one (NIST FIPS 204). Your backend checks both, so a forged Ed25519 signature alone is refused. It protects what you control (backends, treasury approvals, admin actions) until Solana adds quantum-safe signatures natively.
ALSO BUILT
A policy gateway that refuses classical-only signatures and keeps a hash-chained audit log. Shamir vaults that split a key so, for example, any 2 of 3 people can recover it.
OPEN CODE
The core crates, CLI and docs are public on GitHub: github.com/Vanta-Cybersecurity/Vantax
$VANTAX
The dev allocation is locked for 1 year. Creator fees fund an independent security audit. Vantax is pre-release and not audited yet, and we say so up front.
Built to be verified.
