Trust assumptions
What you still have to trust when you use QLP.
Post-quantum withdrawal authorization narrows what can go wrong, but it does not remove every dependency. These remain:
- Solana itself — transactions, fee payers and consensus use Ed25519.
- External AMM — Meteora DAMM v2 is upgradeable by Meteora's conventional key.
- The team treasury — creator fees go to a team-controlled multisig; how they are used depends on the team. See treasury.
- Turnkey wallets — these are conventional Ed25519 keys, never a post-quantum identity.
- Key management — stateful one-time keys must be backed up; mistakes can be unrecoverable.
- This website — a compromised frontend could lie to you. Verify the program ID yourself.
- The upgrade authority — until it is revoked, an Ed25519 key can change the program. See immutability.
- Market risk — treasury and permanent liquidity deepen the market. Neither is a price floor.
See also scope of protection and risks.