opaqueQuantum-safe adminWhat's this?

Any protocol · Live on Sepolia

Make your protocol's admin quantum-safe.

Every upgrade, pause and fee change your contract allows is decided by one ECDSA key, and a large quantum computer can derive it from the key's own transactions. One button moves that power to your PQAdmin, a contract that acts only on a post-quantum FORS+C signature. You keep sending transactions from MetaMask; your 12 words decide what they may do.

1Connect your wallet

The wallet that is your contract's admin today: MetaMask, or any wallet in your browser, on Sepolia.

2Your post-quantum guard key

A FORS+C key from 12 new words, the same key as your Q-Day vault's. It is its own secret: nothing about your ECDSA key or a MetaMask signature can rebuild it, so a cracked ECDSA key can't either.

3Your contract

Paste a contract your wallet administers. The page finds every admin key it can see: an Ownable owner, the proxy's upgrade admin (an OpenZeppelin ProxyAdmin, an EIP-1967 admin or a beacon), every AccessControl role and who holds it, and an AccessManager's admin role. It also lists a Safe's owners and names UUPS upgrades. No contract to try? Make a demo: an upgradeable proxy with two admin keys, or a beacon proxy with roles.

    4Make it quantum-safe

    One button: your PQAdmin is created at the address shown above, and every admin key your wallet holds is handed to it, in ordinary MetaMask transactions. From then on, your wallet alone is no admin of anything here.

    5Act as the admin, post-quantum

    This page signs the call with your guard key: this admin, the chain, the contract, the exact calldata and a deadline. It runs once and only that call. Your wallet only submits it, and any wallet could.

    !Try it as a thief

    Pretend Q-Day came and someone cracked your wallet's ECDSA key. They can sign anything MetaMask can. Here they try to take every admin key back with it. The chain answers.

    Testnet only. PQAdmin is tested, not audited (contracts/src/ethereum/admin/PQAdmin.sol in Opaque's repository). Your 12 words stay in this browser only if you leave them here: back them up, because they are the only way to act as your contract's admin.