Known limits
These are known, written down, and must be settled before a mainnet launch.
| Limit | Why it matters | Plan |
|---|---|---|
| Lifeboat recovery claim is not built | Boarding records a fingerprint, but nothing can use it yet | Verify a snapshot proof plus an LM-OTS signature and reissue on a quantum-safe program or chain |
| Trading runs on Meteora’s programs | The canary cannot freeze trading. Meteora upgrades with an Ed25519 key | Say so plainly. A QuantArk-owned immutable curve is a later version |
| QuantArk program upgrade key is Ed25519 | A quantum attacker could replace the program | Make the program immutable or gate upgrades behind an LM-OTS signature |
| Fee sweep is manual | QuantArk’s fee share sits with an Ed25519 claimer until swept | Claim straight into the treasury from the program |
| Snapshots are posted by an admin | Holders trust the admin to post complete roots | Roots are reproducible from chain data, so anyone can check them |
| xStocks are Token-2022 | A transfer-hook extension would need extra accounts in mint and redeem | Check the live mints before mainnet |
| Public RPC data | Holder lists and history are rate-limited on public endpoints | Dedicated RPC for the app and the snapshot indexer |
| No audit | Bugs in custom cryptography and token handling are the classic loss | Independent audit before mainnet |
Not a limit, by design
Section titled “Not a limit, by design”- Every coin uses one configuration. Creators cannot set fees, supply or authorities. That is intentional.
- No mint or freeze authority on coins. Nobody, including QuantArk, can mint more or freeze holders.