POST-QUANTUM PROTOCOL · SOLANA MAINNETProtected by 34-Chain SHA-256 One-Time Signatures (RFC 8554 LM-OTS) · Immutable Custody.Security boundaries
QUANTUMSAFE
Initialize Vault
QUANTUM SAFE WATCH · READ-ONLY TELEMETRY

Know when a withdrawal is announced.

A browser extension that watches your Quantum Safe and alerts you when something changes. It reads. It cannot move anything.

Read-only. Holds no keys.

Quantum Safe Watch never sees a day key, a recovery kit or a password, and it has no way to send a transaction. Quantum Safe never asks for your recovery kit or its password, here or anywhere else.

Install it

Add to Chrome

This is the only official listing. Its item ID is hdolgpohfdllibcmceaenliegnedeafn; check that it is in the address bar before you install.

Extension Telemetry States

  • STATE 01 · NOMINAL TELEMETRY
    All quiet · 2 Quantum Safes watched
    VAULT_01: 142.50 SOL · No pending withdrawal · Last read 12s ago
    All quiet. Each Quantum Safe you watch, its balance, and when it was last read.
  • STATE 02 · TIMELOCK ALERT
    Withdrawal announced · 23h 58m remaining
    AMOUNT: 100.00 SOL → Unknown destination · Action: Upload Stop-File
    A withdrawal was announced. The amount, the full destination, and the time left to cancel it.
  • STATE 03 · EXPOSURE SCANNER
    Active Wallet Inspection
    SOL Balance + Token Accounts + 2 Open Delegate Approvals Detected
    Check any wallet: what one signature could move, and who can already move it.
  • STATE 04 · ZERO-KEY ISOLATION
    Read-only · Keys held: NONE
    RPC Endpoint: https://api.mainnet-beta.solana.com · Polling: 60s
    Settings. It holds no keys and talks to one Solana RPC endpoint.

What it does

  • You paste the address of a Quantum Safe. It checks that the address is a Quantum Safe of the published program, and watches up to five.
  • Once a minute it reads each one and compares it with what it saw the minute before.
  • When a withdrawal is announced you get a desktop notification, the toolbar badge shows the hours left, and the popup shows the amount, where it is going, whether that is one of your trusted addresses, and a countdown.
  • It also tells you when SOL arrives, when a withdrawal leaves, and when a Quantum Safe’s keys are replaced.
  • It can run the same wallet check as this site, for any address.

Why it matters

A withdrawal to an address you did not list as trusted waits before it can leave, and you can cancel it while it waits. That only helps if you find out in time. Quantum Safe Watch does the finding out on your own computer, with no server of ours in between.

If an alert is not you, the extension does not act. It sends you to what to do now, where your cancel file or your recovery kit stops the withdrawal.

What it does not do

  • It does not withdraw, deposit, cancel or recover. Those stay on this site, the offline tool and the command-line client.
  • It runs only while your browser is running. A closed laptop sees nothing until it is opened again.
  • Alerts are best effort and can be late or missing. Silence is not proof that nothing happened. If it cannot read the network for five minutes, its badge shows “!” and it tells you once.
  • It believes its RPC endpoint. An endpoint that lies can show it anything.
  • It reports SOL arriving, not token deposits.
  • It protects nothing by itself. Quantum Safe protects the withdrawal path, not the chain, and this only tells you what happened on that path.

What it is allowed to do in your browser

  • Remember the addresses you watch and their last public state.
  • Wake up once a minute.
  • Show notifications.
  • Talk to one Solana RPC endpoint: the public mainnet one, or one you set, which your browser asks you to allow.

It cannot read or change any web page, and it loads no code from the network. An endpoint that is not Solana mainnet is refused.

The build this site serves

Reading the published build…

The zip is built from the public source and comes out the same, byte for byte, on any machine: npm ci && npm run extension:build, then compare the SHA-256. A store repackages what it is given, so an installed copy is checked file by file: each file’s own hash is in extension-manifest.json. Fake extensions with this name will appear. The real one matches these hashes, and it never asks for a key.

Load it by hand

  1. Download the zip above and unzip it into a folder you will keep.
  2. Open chrome://extensions in Chrome or another Chromium browser and turn on Developer mode.
  3. Choose “Load unpacked” and pick that folder.
  4. Open Quantum Safe Watch from the toolbar and paste your Quantum Safe’s address.

A hand-loaded extension does not update itself. Check this page for a new version, and compare the hash each time.