<p>Quantum auction protocols are designed to ensure the confidentiality, authenticity, and integrity of submitted bids, but in practice their deployment remains vulnerable to attacks that exploit imperfections in measurement devices. To address this challenge, we introduce a measurement-device-independent quantum auction (MDI-QA) protocol that eliminates the need to trust the measurement apparatus while still preserving both bid privacy and bidder identity anonymity. The protocol is structured around three key components: (i) mutual identity authentication achieved through entanglement swapping combined with decoy-state checks; (ii) Pauli-based bid encoding that is further masked by hash-derived ephemeral identifiers, preventing information leakage; and (iii) the distribution of pseudonymous identifiers across multiple rounds to strengthen anonymity. We rigorously analyze the security against several classes of adversaries, including measure–resend, entangle–measure, and dishonest-relay strategies, and derive an asymptotic lower bound on secrecy capacity against collective attacks via a Bell-diagonal reduction. Furthermore, public verifiability of the final winning bid is guaranteed through a hash-commitment mechanism, which deters auctioneer misreporting. Finally, we validate the protocol’s fundamental subroutines on IBM Quantum simulators, confirming the predicted entanglement-swapping correlations.</p>