Bunker Mode

Building vaults for long-term Solana holdings with separate, hash-based authorization.

[Bunker Mode @BunkerModeIO]

AGI steals keys.

Quantum breaks curves.

Maybe neither happens?

Bunker puts your withdrawals behind a hash-based one-time key either way.

https://t.co/wEdEiMuuiY

BunkeRhcyfJ7dXXNA3kDi421tLijrqudb9ARytKrVbFa

[Bunker Mode @BunkerModeIO]

Your everyday wallet shouldn’t be the master key to your reserves.

Bunker separates deposits, withdrawal authority, and recovery on Solana.

What we’ve built, why it matters, and what comes next.

Public beta. Unaudited.

https://t.co/wEdEiMuuiY https://t.co/CrUgc4kpWy

[Bunker Mode @BunkerModeIO]

Malicious actors (and soon AGI) never sleeps.

So we built a watch that doesn't blink .

Bunker Watch is live in the Chrome Web Store.

Paste your Bunker, close the tab. If a withdrawal is announced, you know in a minute, with time left to cancel it.

Read-only. Holds no keys.

What we're building next. Gates, not dates:

· The easy start: setup in three steps, a practice withdrawal and cancel, alerts on your phone. Being built now.

· Send to Bunker for terminals and wallets; coming soon.

We build while the auditors read.

Saving Solana, one wallet at a time.

https://t.co/K7AHlHWjM8

Public beta. Not audited until the report is published. Start small.

Every door, in order, and what each one waits on: https://t.co/mxTywFXrC7

[Bunker Mode @BunkerModeIO]

The vault was full. Now it went to work.

After taking some time to look at Bunker

Almost everything in the bounty vault went to the auditors. One transfer out, listed right under the vault with its signature, so you can check where every coin went.

@CertiK audit starts this week and should be done in just a few days.

The vault refills from creator rewards, and the bug bounties stay open the whole time.

Paid in the open: https://t.co/xsMYKNvEaP

Bunker is a public beta on Solana Mainnet and is unaudited until the report is published. Real funds at risk. Prepare. Don't panic.

[Bunker Mode @BunkerModeIO]

Auditors are reading every line of Bunker.

We're not touching anything they're checking.

So we took the other hallway.

Currently awaiting approval for listing in the Chrome Web Store, Bunker Watch is available for direct download now at https://t.co/wfRLzwFFd5

A Chrome extension that pings your desktop the second a withdrawal is announced from your Bunker.

Read-only. Holds no keys.

Four doors left. Gates, not dates.

https://t.co/mxTywFXrC7

[Bunker Mode @BunkerModeIO]

We built it in the open.

Now we’re bringing in the pros.

Audit’s booked for Bunker, and the bounty stays open the whole time.

https://t.co/SiQIuorLGI

[Bunker Mode @BunkerModeIO]

The bounty vault has two ways out:

a researcher who finds a real bug,
|
or the audit that looks for one.

Your move.

https://t.co/SiQIuordRa

[Bunker Mode @BunkerModeIO]

Drainer got your wallet? Let it sign all night.

On Bunker your wallet key can't withdraw. That takes a separate one-time key the drainer never saw.

Two keys. One door. Live on Solana.

[Bunker Mode @BunkerModeIO]

@CertiK we've applied for an audit of Bunker and would like to move fast given the pressing nature of the threat.

Bunker is an open-source vault on Solana: withdrawals are authorized by one-time hash-based signatures, not your wallet key.

It is live in public beta, unaudited, and the program is a verified build.

Can we get an expedited review?

Code: https://t.co/Ece1CBmM7P

[Bunker Mode @BunkerModeIO]

Break the Bunker.

Bunker is live on Solana mainnet with real funds, and nobody has audited it yet. So we're opening it up.

In scope: the program, the site, the offline tool, and the CLI. All of it is open source.

Severity:
→ Critical: funds leave a Bunker without the owner's keys, or its rules get bypassed
→ High: an owner loses control, or signs something they didn't see
→ Medium: a Bunker is disrupted or misreported, no funds move
→ Low: a real flaw with no path to funds

Rules: proof of concept only. Test on your own Bunker with small amounts. Never touch funds that aren't yours. Report privately through GitHub, no public disclosure before the fix ships.

Paid in SOL from the bounty vault, funded by creator rewards. Public write-up after every fix, with your name on it if you want.

It's not a bug. It's a bounty.

https://t.co/xsMYKNvEaP