faq.

is this real post-quantum?

It uses a post-quantum flavored key ceremony as a mint ritual, but the on-chain trust root is an EIP-712 ECDSA attestation. The chain checks a keccak256 hash and a normal signature.

then why is verification off-chain?

A real on-chain verify would cost far more gas per mint and would bury a meme coin under cryptographic ceremony. Instead, our backend generates an EIP-712 attestation with a normal ECDSA key. The on-chain contract ecrecovers the attestation in about 60k gas.

We are explicit about this trade-off because pretending otherwise would be a lie. If you trust the contract bytecode, you cannot be cheated of supply or rugged of fees, regardless of what the backend does.

can the backend rug me?

The backend can delay your mint by refusing to issue attestations. It cannot:

  • mint to a different address - your address is inside the signed message
  • mint extra supply - the contract caps public mint at 10,000,000
  • change the price - MINT_PRICE is a constant in the bytecode
  • steal your fee - fees are forwarded to the dev wallet on every mint, the contract holds zero ETH

what about replays?

Every pkHash can mint exactly once. The contract stores a pkUsed[pkHash] mapping. The message is bound to a fixed domain tag plus your recipient address, so attestations cannot be reused on any other contract.

what happens if my attestation expires?

The deadline is 2 hours from when you clicked sign. If it expires before you mint, just click sign again. Your address is not blocked - a new pkHash will be generated.

what happens at 100% mint?

When 20,000 mints have been claimed, the public mint is over forever. The 10M LP reserve gets paired with ETH on Uniswap. The protocol is then finished - there is no team unlock, no future emission, no governance.

where do my fees go?

0.001 ETH per mint is forwarded to the dev wallet at the same time as your tokens are minted. There is no withdraw button and no fee escrow. If the contract is ever compromised, no ETH is held.

why "Sphincs Minus"?

Because it nods at SPHINCS without claiming the full theorem on-chain. It is Sphincs minus the expensive part, plus a very small immutable mint gate.