Every coin has 1,000,000,000 units and starts on one bonding curve: a constant product on virtual reserves of 1,125,000,000 coins and 1.125 ETH, so it opens at a fully diluted value of exactly 1 ETH. 750,000,000 coins are for sale. When 2.25 ETH net has come in, the price is nine times the opening price and the curve closes; the buy that crosses the end is cut there and refunded what it did not need.
That same buy graduates the coin: it creates the Uniswap v4 pool ETH/coin (LP fee 0, tick spacing 200, the pad as hook) at the curve's closing price and places the 2.25 ETH and the 250,000,000 unsold coins in it as one full-range position. The position's NFT goes to the platform owner's wallet.
1% of the ETH side of every trade, on the curve and in the pool, whatever the swap shape (an exact output pays 1% of its gross). Of that 1%:
Circulating means the coins the curve has sold, and after graduation every coin outside the pool, read from the coin's own balance sheet. There is no snipe tax and no other fee.
A vault key is an SLH-DSA-SHA2-128s public key (NIST FIPS 205), 32 bytes, made from 24 words in your browser. SLH-DSA rests on SHA-256 alone, so Shor's algorithm, which breaks the elliptic-curve keys of ordinary wallets, gives no way in. Anyone may put coins or ETH into any key. Only an instruction signed by the key takes anything out: sell, buy with the key's ETH, send to another key, send to a wallet, or withdraw ETH. Each instruction carries the key's next nonce and a deadline, and may tip whoever submits it, so a key never needs a wallet of its own.
The vault checks each 7,856-byte signature on chain with the SHA-256 precompile: about 2,140 hash calls, about 1M gas. The verifier agrees with NIST's own test vectors. Your 24 words are the only way in: QDAY cannot recover them.
A prize fed by 0.1% of every trade, split 40/20/20/20 over four rungs. secp256k1: sign with the key of an Ethereum address the contract derived from a public phrase. P-256: the same over the curve behind passkeys. BLS12-381: a signature under a key mapped from a hash. RSA-2048: any factor of the 617-digit challenge number (seal, then reveal at least 10 blocks later). Every claim message names its recipient, so a copied claim still pays that recipient.
Claiming the secp256k1 prize deploys an alarm contract every coin watches. From then on a coin moves only between the pad, the vault and the PoolManager: wallets freeze, curve buys must land in a vault, pools keep their liquidity. Vaulted coins keep trading under their hash-based keys.
All verified on Etherscan, compiler 0.8.28 with via-IR, 200 optimizer runs, EVM version cancun.
The qday command-line tool lets an AI agent or a script launch coins, trade and run a vault with its own post-quantum key. It signs vault instructions locally and never prints a key.