Vitalik Buterin's 4-Step Plan to Make Ethereum Quantum-Proof

Ethereum is preparing a comprehensive cryptographic overhaul to defend against quantum computing threats. The blockchain is set to undergo a sweeping upgrade of its encryption algorithms and transaction verification methods in 2026.

"Now, the quantum resistance roadmap. Today, four things in Ethereum are quantum-vulnerable: consensus-layer BLS signatures, data availability (KZG commitments+proofs), EOA signatures (ECDSA), Application-layer ZK proofs (KZG or groth16). We can tackle these step by step…" — vitalik.eth (@VitalikButerin), original post

Why This Matters

Quantum computers pose a fundamental threat to the cryptographic foundations underpinning most blockchains. Ethereumcurrently relies on several vulnerable mechanisms — from validator signatures to user transaction verification. A proactive migration to post-quantum cryptography is essential to preserve network integrity and protect user funds. The Ethereum Foundation designated post-quantum security as a top strategic priority back in January and assembled a dedicated development team to address the challenge.

Four Vulnerable Components and the Replacement Plan

According to the roadmap shared by Vitalik Buterin, four protocol elements are susceptible to quantum attacks:

• Consensus-layer BLS signatures;
• Data availability system (KZG commitments and proofs);
• EOA signatures using ECDSA;
• Application-layer ZK proofs (KZG or groth16).

The upgrade will proceed in stages. Validator signatures based on BLS will be entirely replaced with hash-based cryptography. Developers will need to identify a sufficiently fast hashing algorithm, as standard options are too slow for the network's needs.

The current KZG verification system will give way to STARK proofs. This transition demands substantial engineering effort — the new algorithms are significantly larger, requiring the team to optimize data storage methods.

User Wallets and a New Transaction Type

To secure user addresses, the protocol will introduce a new transaction type featuring validation and gas fee abstraction — EIP-8141. This will enable any cryptographic scheme to be used for signing transactions, removing the exclusive reliance on ECDSA.

Quantum-resistant algorithms are considerably heavier than their conventional counterparts. Quantum-safe proofs currently require approximately 10 million gas, resulting in prohibitively high fees. To prevent costs from spiraling, the network will update its computational mechanisms and implement protocol-level aggregation.

The approach works as follows: transactions will be verified before block inclusion, at the mempool stage. Every half-second, nodes will submit a single lightweight proof attesting to the validity of all computations to the main network. This method will reduce system load and lower transaction costs.