notes from the lab
Blog
Release notes and design write-ups from the lab, mostly the QRL 2.0 post-quantum ecosystem, plus the occasional security note.
Post-quantum signature checks for QRL 2.0 smart contracts
Our go-qrl pull request is merged: an ML-DSA-87 verification precompile that takes the 64-byte digests QRL wallets sign, and a SHAKE256 precompile to rebuild them on-chain.
Fixed in hours, paid in seven months: How Binance treats a bug that can steal all your funds
I reported a Trust Wallet Core bug that let a dApp show you one transaction and get your signature on another. Binance fixed it the day it was triaged, then took seven months to rate it P3 and pay $1,000.
Qnero: Post-Quantum Monero, Now on Testnet
Qnero is a private-by-default cryptocurrency built from hashes and lattices, mined with RandomX. Every transfer hides sender, recipient and amount, and the public testnet is open to try in the browser today.
QuantaPool Is Preparing for QRL 2.0 Mainnet: DigitalGuards Seeks a US Operating Partner
QuantaPool is heading for QRL 2.0 mainnet under a dedicated US operating entity. DigitalGuards is in advanced discussions with a prospective US partner and remains open to further qualified candidates. Here is the role.
MyQRLWallet Desktop: A Post-Quantum Wallet Where the UI Never Touches a Key
Our QRL wallet is now a desktop app. Under the familiar interface sits a hardened four-process Electron architecture: a sandboxed renderer, a narrow bridge, a brokering main process, and an isolated signer that is the only place plaintext key material ever exists.
MyQRLWallet Mobile: The Post-Quantum Wallet in Your Pocket
The MyQRLWallet mobile app wraps the same wallet core as the web, desktop, and extension in a native shell: biometric device login, PIN-gated signing, screenshot prevention, a native QR scanner, and one-tap dApp pairing over qrlconnect:// deep links.
QuantaSwap: Atomic Swaps Between Ethereum and QRL, With Nobody to Trust
QuantaSwap settles WETH/QRL swaps through hashed timelock contracts on both chains: no custodian, no bridge, no admin keys. A technical tour of the HTLC core, the timelock math, the coordination-only order book, and the market maker that keeps the book stocked.
MyQRLWallet: A Year On, and Everything New for QRL 2.0
Since we introduced our QRL 2.0 web wallet in 2024, MyQRLWallet has grown into a full post-quantum toolkit: a mobile app, dApp Connect, native post-quantum signing, hardened encryption, and a token factory. Here is what is new.
Introducing QuantaPool (Alpha): Experimental Liquid Staking for QRL 2.0
QuantaPool is an early, experimental liquid staking protocol for QRL 2.0. Deposit QRL, receive stQRL, and earn validator rewards without running a node. This is alpha software, so treat it accordingly.
QRL Connect: Post-Quantum dApp-to-Wallet Connection, and How to Add It to Your dApp
QRL Connect links dApps to the MyQRLWallet app over an end-to-end encrypted, post-quantum channel (ML-KEM-768 and AES-256-GCM). Here is how the cryptography works and how to integrate the open-source SDK.
ZondScan: The Block Explorer for QRL 2.0
ZondScan is the open block explorer for QRL 2.0. Track blocks and transactions in real time, inspect accounts and tokens, verify smart contract source, and try a live dApp demo.
Introducing Zond QRL Web Wallet by DigitalGuards
DigitalGuards introduces QRLWallet.com, a web application for seamless interaction with the QRL Zond blockchain, fortified with post-quantum encryption against the threats posed by quantum computing.
Pentesten: het middel om schade door cyberaanvallen te voorkomen
Wat is een pentest, waarom is het belangrijk, en hoe zet je het effectief in? Een gids over interne en externe penetratietests door DigitalGuards.