DOOMSDAY

DOOMSDAY

Doomsday · a longer view of ownership

The vault Script trace Spend anatomy

The vault

A bitcoin vault that spends without ever exposing a public key.

0.0 / 18

Skip to the vault ↓

Sources

Avihu Levy, Quantum-Safe Bitcoin Transactions Without Softforks: the paper and pipeline this vault runs.
Robin Linus, Binohash (2026), the construction QSB builds on.
The spend: 305a24ff…ab07, block 964,199. Every element of its script is executed on the Script Trace page; every one of its 25 signatures is recomputed on Spend Anatomy.
Bitcoin Core v30.2 interpreter.cpp: SignatureHash, FindAndDelete, IsValidSignatureEncoding, the rules ported into this page's engine.
Security margins: Lygos recompute of 2026-09-11, red-pen verified. k=1 is an exact closed form; k≥2 are medians over reveal histories, ±1 bit. Grover figures are estimates of the best generic attack, not proofs.
Not covered yet: the formal concrete-security argument for a grinding-chosen digest is in progress, and the spend depends on legacy ECDSA verification staying valid, which BIP-361 as drafted (per its abstract) would eventually sunset.
The vault on this page is the earlier script: round 1 ends in a bare CHECKMULTISIG (byte 4998, 0xae) whose result is never checked. The corrected script uses CHECKMULTISIGVERIFY (profile 91869a2e); the after-reveal margins quoted here price that corrected script. The never-revealed figures apply to both.

The machine, the film and the engravings are from the Lygos ownership studies: authored artwork, each engraving with a primary source. They illustrate; they do not certify this vault. The machine is fictional. Every on-chain number on this page comes from the mainnet spend; the security margins are the 2026-09-11 recompute. engine self-test: running…