Vitalik Buterin has published a detailed roadmap describing how Ethereum plans to prepare for the threat posed by quantum computing. The proposal argues that Ethereum cannot wait for fully capable quantum machines to arrive before acting, because several of the network’s most important cryptographic systems could become vulnerable once quantum hardware reaches a sufficient threshold.
Ethereum’s key cryptographic building blocks face quantum risk
Buterin identified four major areas of exposure: BLS signatures used in the consensus layer, KZG commitments used in data availability, ECDSA account signatures, and zero-knowledge proofs. These systems depend on elliptic-curve cryptography or discrete logarithm assumptions, which are the kinds of structures that Shor’s algorithm could break on a powerful enough quantum computer.
He pointed to a Metaculus estimate that gives a 20% probability of such machines arriving before 2030. If that timeline proves even partially accurate, Ethereum’s margin for preparing a secure transition may be much smaller than many in the industry previously assumed.
ETH2030 introduces a full post-quantum stack
The roadmap centers on ETH2030, a post-quantum cryptography stack spanning 46 source files across seven packages. According to the published details, it includes six quantum-resistant signature schemes. The stack has already been tested across 48 packages, with more than 20,900 tests passing, suggesting the work has moved beyond theory into substantial implementation and validation.
ETH2030 also adds 13 custom EVM precompiles, including an NTT precompile at address 0x15. These additions are meant to accelerate lattice-based cryptography and STARK proof verification, both of which are important for making post-quantum systems practical inside Ethereum’s execution environment.
Higher verification costs require new efficiency tools
Buterin acknowledged that post-quantum security comes with a major cost increase. Today, verifying an ECDSA signature costs roughly 3,000 gas, while a quantum-resistant verification could reach about 200,000 gas. To reduce that burden, the roadmap relies on recursive STARK aggregation under EIP-8141, allowing many signatures to be compressed into a single proof.
For data availability, the plan replaces KZG commitments with Merkle-based and lattice-based alternatives. Those systems rely on hash-based security and Module-LWE assumptions rather than elliptic curves. While more complex, they are designed to remove one of the major long-term weaknesses Ethereum faces in a post-quantum scenario.
Phased migration through dual-signature consensus
At the consensus layer, ETH2030 introduces dual-signature attestations that combine legacy and post-quantum cryptography. This design would let validators migrate gradually instead of forcing an immediate and disruptive cutover. Finality mechanisms would also be adapted through a dedicated adapter that supports quantum-safe verification.
The Ethereum Foundation has already formed a Post-Quantum Security team in January 2026, led by Thomas Coratger, alongside $2 million in research prizes. Buterin also warned at Devconnect Buenos Aires that elliptic-curve cryptography could fail before the 2028 U.S. election, underscoring the urgency behind the roadmap.
All post-quantum features are scheduled to activate at the I+ fork level. On February 27, 2026, developers successfully ran the system on a Kurtosis devnet, where it produced blocks and verified all new precompiles. That milestone indicates Ethereum’s quantum-resistance effort is already progressing along a concrete, phased implementation path rather than remaining a purely academic exercise.