// the forge challenge

Break ML-DSA.
Take the bounty.

Below is one ML-DSA-65 public key. Its secret key was generated in memory and discarded on the spot, and was never saved anywhere. Nobody can sign for this key, including us. Produce one valid signature over the claim message and the bounty is yours.

The key

The rules

01Sign the claim

Message (UTF-8): quantumproof-forge-v1: followed by your qpf1 wallet address. The signature must verify against the key above under ML-DSA-65 (FIPS 204, empty context).

02Submit it

Paste it below or POST it to /api/forge. The node runs the same FIPS 204 verify it uses for every block. One attempt per second.

03Get paid

The first valid forgery wins. The tQPF bounty is credited instantly on-chain, the $QPF bounty is sent by the team, and the winner and signature are shown here forever.

Submit a forgery

Every attempt is counted publicly.

Or script it

Fetch the key, try your attack, submit.

curl https://quantumproofchain.net/api/forge
curl -X POST https://quantumproofchain.net/api/forge \
  -H "content-type: application/json" \
  -d '{"address":"qpf1…","sig":"<hex>"}'