io.github.kota1026/vaultguard-mcp

Quantum Shield

Post-quantum asset protection protocol for Ethereum using NIST-standardized cryptography

What is Quantum Shield?

Quantum Shield protects smart contract assets against quantum computing threats using NIST FIPS 204 (ML-DSA/Dilithium) and FIPS 205 (SLH-DSA/SPHINCS+) dual post-quantum signatures, combined with a decentralized Prover Pool, VRF-based selection, and time-locked custody.

Key Features

• Dual PQC Signatures — ML-DSA-65 + SLH-DSA for defense-in-depth
• Prover Pool — Decentralized verification with stake-weighted selection via VRF
• Time-Locked Custody — 24h normal unlock, 7-day emergency path with bond
• Observer Network — Independent challenge system with quadratic slashing
• On-Chain Governance — veQS token voting, security council, insurance fund
• 11 Sub-Applications — Consumer, Prover, Observer, Explorer, Enterprise, Governance, Admin

Architecture

┌─────────────────────────────────────────────────────────────────┐
│  Frontend (Next.js 15)         11 apps, 136 routes, ja/en i18n │
├─────────────────────────────────────────────────────────────────┤
│  Backend API (Rust/Axum)       REST API, SIWE auth, Auto-Claim │
├──────────────────┬──────────────────────────────────────────────┤
│  L1: Sepolia     │  L3: Arbitrum Sepolia                       │
│  • Vault         │  • CoreLayer    • Governor                  │
│  • ProverRegistry│  • veQS         • RewardRouter              │
│  • SPHINCS+ Vfy  │  • QSToken      • InsuranceFund             │
└──────────────────┴──────────────────────────────────────────────┘

9 Core Sequences

Tech Stack

Deployed Contracts

L1: Ethereum Sepolia

L3: Arbitrum Sepolia (12 contracts)

All L3 contracts verified on Sourcify.

Quick Start

Prerequisites

• Docker & Docker Compose
• Rust 1.75+ with cargo
• Node.js 20+ with pnpm
• Foundry (forge, anvil)

Development Setup

# 1. Start infrastructure
docker compose up -d postgres redis rabbitmq l3-node minio minio-init

# 2. Run database migrations
cd src/api/api
DATABASE_URL="postgresql://quantum:quantum_dev@localhost:5432/quantum_shield" sqlx migrate run

# 3. Start backend API (port 8080)
cargo run --bin api-server

# 4. Start frontend (port 3000)
cd src/frontend/web
pnpm install
pnpm dev

Verify

curl http://localhost:8080/v1/health
# {"status":"healthy"}

Project Structure

quantum-shield/
├── src/
│   ├── api/api/              # Rust/Axum backend
│   │   ├── src/routes/       # API route handlers
│   │   ├── src/services/     # Business logic
│   │   ├── migrations/       # PostgreSQL migrations (17 files)
│   │   └── config/           # YAML configuration
│   ├── frontend/web/         # Next.js 15 frontend
│   │   ├── src/app/          # App Router pages (11 apps)
│   │   ├── src/components/   # 300+ React components
│   │   ├── src/hooks/        # React Query hooks per app
│   │   └── locales/          # ja/en translations
│   ├── l1/contracts/         # L1 Solidity contracts (Foundry)
│   ├── l3/                   # L3 governance contracts
│   └── frontend/sdk/wasm/    # WASM SDK (Dilithium + SPHINCS+)
├── docs/
│   ├── core/SEQUENCES.md     # 9 core sequence specifications
│   ├── ACTUAL_STATE.md       # Current implementation state
│   └── pitch/                # Pitch deck, grant applications
├── docker-compose.yml        # Development infrastructure
└── .github/workflows/        # CI/CD pipelines

Testing

# Backend
cd src/api/api && cargo test

# Frontend E2E
cd src/frontend/web && npx playwright test

# Smart Contracts
cd src/l1/contracts && forge test

Test Coverage: 137 E2E tests passing, 107 integration tests, 0 failures.

Security

• Cryptography: NIST FIPS 204 ML-DSA-65 + FIPS 205 SLH-DSA (post-quantum)
• Hashing: SHA3-256 (no keccak256 in application layer)
• Authentication: SIWE (Sign-In with Ethereum) + JWT
• Time Locks: 24h normal, 7-day emergency with bond collateral
• Slashing: Quadratic penalty for malicious provers

Audit Status

• [x] Internal code review
• [ ] External audit (planned)

License

This project is licensed under the MIT License. See LICENSE for details.

Built for a post-quantum future.