Developers
- 1Apply
- 2Approved
- 3Deposit
- 4API key
Connect the sponsor wallet
The wallet you connect becomes your team's sponsor. It signs the application, funds the gas tank and claims the API key.
Quantum protected smart accounts are ERC 4337 accounts on Robinhood Chain whose only signer is an ML DSA 44 (FIPS 204) post quantum key. Every UserOperation is checked on chain by the Fireblocks ML DSA verifier, and a team sponsored paymaster pays the gas so the account holder never needs ETH.
Separate from gasless investment accounts
This is a different rail from the regular gasless investment accounts, which are owned by a normal wallet and signed with ECDSA. Quantum accounts use only an ML DSA 44 key. New quantum account creation on stonkbrokers.io is paused until a better key install option ships.
Fireblocks verifier caveats
- The verifier is the Fireblocks Labs evm ml dsa verifier, pinned at commit cca262b. It is experimental and has not been audited.
- Fireblocks marks the repository FOR SECURITY RESEARCH ONLY, NOT FOR PRODUCTION USE. Treat every account on this rail as experimental and keep balances small.
- Fireblocks documents a universal forgery issue (S1) in helper paths outside verify(). We ship only the verify() entry point and reject the lifted public key case before it is called.
- The verifier passes the NIST ACVP and Wycheproof vectors, 320 tests, 62 Z3 properties, 64 Lean theorems and a 50 mutant campaign. Passing tests is not a proof of security. Never use the published KAT test keys.
- An independent external audit is required before real funds use these accounts.
Verifier code is MIT licensed, Copyright (c) 2026 Fireblocks Ltd. Report verifier issues to security@fireblocks.com. Source: fireblocks labs / evm ml dsa verifier.
Security model
- The ML DSA 44 key is the only authority over the account. There is no ECDSA owner, guardian or admin.
- There is no recovery path, no upgrade path and no owner override in the account or the factory.
- The public key is stored once as an onchain blob. The account checks the blob code hash again on every validation, so a swapped blob fails closed.
- Accounts run on the canonical EntryPoint v0.7 and are deployed through the factory with CREATE2.
No recovery
If the ML DSA key and its encrypted backup are lost, the account and everything inside it is locked forever. Nobody, including StonkBrokers, can move the funds. Teams must make users confirm a backup before the first deposit.
| Contract | Address | |
|---|---|---|
| EntryPoint v0.7 | 0x0000…a0320x0000000071727De22E5E9d8BAf0edAc6f37da032 | |
| ML DSA 44 verifier (Fireblocks) | 0x63f3…b47f0x63f3eef0ee07ac1fac9a8d6d15739a5dbff8b47f | |
| Keccak f1600 helper | 0xdb2e…25db0xdb2e8e93592f2895f910e7f5288989d0fec525db | |
| Account factory | 0xf21c…984b0xf21ca062c23f8599ae2f660906939161a9c4984b | |
| Account implementation | 0x645C…d5110x645CeD0937ED4735EcC3E3d926e654687cA6d511 | |
| Sponsor paymaster | 0xce77…06530xce77357bfc0d8a3123fb72eab06a6ab41f460653 | |
| Bundler relayer | 0xAfB4…dB680xAfB4c0881c38D988001878860fcE399fc744dB68 | |
| Demo account | 0x198b…25C60x198b9f9FDE904b5c491246Bc86aBDCD48B1725C6 |
| Operation | Gas |
|---|---|
| Verify a valid ML DSA 44 signature | ~1.30M |
| Reject an invalid signature | ~66k |
| Publish a public key blob (once per key) | ~4.11M |
| Gasless UserOperation | ~1.93M |
| UserOperation that also deploys the account | ~2.05M |
| Create account (gasless, publishes key) | ~5.35M |
Fees for teams
Teams deposit ETH into the paymaster for their own users. Each sponsored operation is charged the real gas cost plus a service fee of 10% (capped at 50%) and an optional flat fee of at most 0.01 ETH. Unused deposits can be withdrawn by the team at any time.
Team onboarding
Apply from the developer desk by signing a short message with the team wallet.
We review every application by hand. Approval is required before any account is sponsored.
Claim the API key once with a second signature. Only a hash of it is stored on our side.
Deposit at least 0.01 ETH into the paymaster for your team wallet, then send UserOperations through the relayer.
Limits per team: 2 key blobs, up to 500 operations per day (each team sets its own daily limit), and a shared budget of 20 key blobs per day. Signed requests expire after 10 minutes and can be used once. Open the developer desk.