Connect with us

Crypto World

Vitalik Buterin Unveils Ethereum Quantum-Resistance Roadmap

Published

on

Crypto Breaking News

Vitalik Buterin has outlined a four-pronged plan to harden Ethereum against quantum threats, identifying four areas most vulnerable: validator signatures, data storage, user account signatures, and zero-knowledge proofs. As headlines spotlight quantum risk across crypto, including discussions around Bitcoin (CRYPTO: BTC) and other chains, the Ethereum co-founder argues that a careful, long-horizon upgrade path is essential. In a Thursday post, he described a roadmap that hinges on selecting a post-quantum hash function for all signatures—an issue that could determine the network’s security stance for years. The discussion echoes prior proposals, including Justin Drake’s Lean Ethereum idea proposed in August 2025.

Key takeaways

  • Buterin identifies four pillars for quantum resistance: validator signatures, data storage, user account signatures, and zero-knowledge proofs, framing a holistic upgrade rather than piecemeal fixes.
  • The plan contemplates replacing the current BLS signatures with lean, quantum-safe hash-based signatures, with the choice of hash function carrying long-term implications for the network.
  • Data storage would transition from KZG to STARKs, a move that aims to preserve verifiability while enhancing quantum resistance, albeit with significant engineering work ahead.
  • User accounts would shift from ECDSA toward signatures compatible with lattice-based, quantum-resilient schemes, though heavier gas costs are a concern.
  • A long-term solution centers on protocol-layer recursive signatures and proof aggregation to keep on-chain verification costs in check, potentially enabling vast scalability for quantum-resistant proofs.
  • The conversation nods to ongoing research, including ETHresearch discussions on recursive-STARK approaches and the broader Strawmap effort to accelerate finality and throughput.

Tickers mentioned: $BTC, $ETH

Sentiment: Neutral

Market context: The push toward quantum-resistant primitives sits against a backdrop of ongoing network upgrades and a broader move toward scalable zero-knowledge proofs, with developers weighing security, efficiency, and long-term viability as they plan multi-year transitions.

Why it matters

The four-pronged approach to quantum resistance is more than a theoretical exercise; it signals how Ethereum intends to preserve user trust as quantum threats loom on the horizon. If effective, a hash-based signature layer could become the de facto standard for post-quantum security, shaping how users interact with wallets, smart contracts, and validator participation for years to come. The decision on the hash function is particularly consequential: once a standard is chosen, it tends to anchor the protocol for a generation, influencing tooling, hardware requirements, and compatibility with future cryptographic advances.

Advertisement

On data storage, the plan to replace KZG with STARKs reflects a subtle shift in cryptographic assumptions. STARKs are lauded for being quantum-resistant and transparent, but integrating them into Ethereum’s data availability and verification stack would demand substantial engineering effort, optimization, and rigorous security audits. Buterin has framed it as “manageable, but there’s a lot of engineering work to do.” The move would balance the need for robust post-quantum guarantees with the practical realities of a live, globally used network.

Account signatures represent another frontier. Ethereum currently relies on ECDSA, a staple of today’s cryptographic ecosystem. Moving to a system that can accommodate lattice-based or other quantum-safe schemes may impose heavier computational loads and gas costs in the near term. Yet the long‑term payoff could be a network that remains secure even as quantum computing capabilities grow. Buterin points to a longer-term fix—protocol-layer recursive signature and proof aggregation—that could dramatically reduce gas overheads by verifying many signatures and proofs within a single frame. If realized, that approach could unlock scalable, quantum-resistant transactions without sacrificing usability.

A central theme across the discussion is the balance between immediate practicality and enduring security. Quantum-safe signatures are not a cosmetic upgrade; they alter core data paths, from how validators validate blocks to how users sign transactions and how proofs are verified. The blockchain community increasingly recognizes that a “one-size-fits-all” cryptographic choice may not suffice; instead, a layered strategy—where traditional primitives coexist with post-quantum alternatives and where recursive techniques optimize verification—could define Ethereum’s security posture for years to come.

Beyond the cryptographic specifics, the conversation is anchored in ongoing academic and developer experiments. For example, researchers have explored recursive-STARK concepts to compress bandwidth and computation, including discussions on a bandwidth-efficient mempool that leverages recursive proofs. This line of inquiry mirrors Ethereum’s broader push toward scalable, verifiable computation that remains tenable in a post-quantum world. The discussion also nods to real-world upgrade planning, such as Lean Ethereum, which Justin Drake proposed in August 2025 as a pragmatic framework for accelerating quantum readiness without destabilizing current operations.

Advertisement

In parallel, governance and roadmap conversations continue to unfold within the Ethereum Foundation and the wider developer community. Buterin’s own posts have highlighted expectations that progress on “Strawmap” could yield progressive decreases in both slot time and finality time, signaling a more agile path to security without sacrificing decentralization or user experience. The architecture changes under consideration—ranging from signature schemes to data verification protocols—must harmonize with these operational expectations to minimize disruption while maximizing resilience against quantum-era threats.

What to watch next

  • Updates on Lean Ethereum: Any formal milestones or testnet deployments that demonstrate practical quantum-ready components in action.
  • Hash-function selection for post-quantum signatures: The criteria, security proofs, and network-wide implications of choosing a long-term standard.
  • Progress toward STARK-based data storage: Engineering roadmaps, performance benchmarks, and on-chain verification strategies.
  • Adoption of lattice-based or alternative signatures for user accounts: Changes to wallets, client libraries, and tooling compatibility.
  • Implementation of recursive signatures and proof aggregation: Realistic timelines, gas impact assessments, and potential protocol changes needed to support such a paradigm.

Sources & verification

  • Vitalik Buterin’s quantum-resistance roadmap post and related discussions: https://x.com/VitalikButerin/status/2027075026378543132
  • Lean Ethereum proposal by Justin Drake: https://cointelegraph.com/news/justin-drake-proposes-lean-ethereum
  • Headlines about quantum threats to Bitcoin: https://cointelegraph.com/news/saylor-says-quantum-threat-to-bitcoin-is-more-than-10-years-out-expects-coordinated-global-upgrade-if-risk-emerges
  • Quantum-resistant data storage and STARKs vs KZG discussion: https://cointelegraph.com/news/vitalik-details-roadmap-for-faster-quantum-resistant-ethereum
  • Ethereum Foundation quantum gas‑limit priorities and protocol considerations: https://cointelegraph.com/news/ethereum-foundation-quantum-gas-limit-priorities-protocol
  • Strawmap and related timing expectations: https://cointelegraph.com/magazine/bitcoin-7-years-upgrade-post-quantum-bip-360-co-author/
  • Recursive-STARK mempool concept: https://ethresear.ch/t/recursive-stark-based-bandwidth-efficient-mempool/23838

Ethereum’s quantum resilience roadmap: four frontiers and the road ahead

Ethereum’s path to quantum resistance, as articulated by Buterin, centers on four pivotal domains: validator signatures, data storage, user account signatures, and zero-knowledge proofs. The proposal calls for replacing the current Boneh-Lynn-Shacham (BLS) consensus signatures with a lean, hash-based, post-quantum alternative. The selection of the hash function is underscored as a long-term decision, potentially locking in an approach for years to come. This shift aims to preserve the integrity of validator operations while mitigating the risk that quantum computers could break current signatures used to attest to blocks and transactions.

In parallel, the data layer would transition away from KZG-based storage to STARKs, a move designed to maintain verifiability under quantum pressure. Buterin notes this is a technically manageable transition, yet it requires substantial engineering effort to integrate seamlessly with Ethereum’s existing data availability and verification mechanisms. If realized, the change would address a core vulnerability by ensuring that data proofs remain verifiable even in a quantum era, without compromising network performance.

On user accounts, the plan envisions a broader compatibility with signature schemes beyond ECDSA, including lattice-based approaches that resist quantum attacks. The practical challenge here is gas consumption: quantum-safe signatures tend to be heavier to compute, which could elevate gas costs in the near term. The longer-term payoff, though, would be a network able to function securely even when advanced quantum hardware becomes capable of breaking traditional cryptographic keys. To counterbalance the added computational load, Buterin points to a protocol-layer solution—recursive signature and proof aggregation—that could dramatically reduce on-chain gas overhead by consolidating verification work into master frames that validate thousands of signatures or proofs at once.

Quantum-resistant proofs pose another cost hurdle, motivating the same aggregation strategy. Instead of individually verifying every signature and proof on-chain, a single, compiled structure—an overarching validation frame—would authorize thousands of sub-validations in a single operation. This approach could reduce the per-transactions verification burden to near-zero costs in practice, enabling a scalable model for post-quantum proof workloads. The narrative echoes ongoing research, including discussions around a recursive-STARK-based bandwidth-efficient mempool, which envisions more efficient data flow and validation under heavy workloads.

Advertisement

Finally, the Strawmap discussions hint at a broader tempo for the network upgrade. Buterin and researchers anticipate incremental improvements in slot times and finality, signaling a measured cadence for upgrading cryptographic primitives without triggering disruptive forks. The convergence of these threads—signature upgrades, data storage shifts, and aggregation-based efficiency—paints a future where Ethereum (ETH) remains secure and usable as quantum capabilities advance. The dialogue around these topics reflects a mature, evidence-based approach to governance and engineering, balancing theoretical security with the practicalities of a live, billions-of-dollars ecosystem.

Risk & affiliate notice: Crypto assets are volatile and capital is at risk. This article may contain affiliate links. Read full disclosure

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

Block’s retreat to 2019 scale could be a hint of deeper shifts in payments economics

Published

on

(Citrini Research)

Fintech company Block is shrinking back toward its pre-pandemic size, cutting staff to about 6,000 from a Covid-era peak of over 10,000, compared with just 3,800 in 2019.

CEO Jack Dorsey says AI allows smaller teams to move faster. While that’s certainly true, the reset may reflect a tougher reality: stablecoin rails are likely beginning to compress the card-based fees that fueled the company’s expansion.

Block built its business on a payments system that charges merchants a percentage of every swipe. Stablecoins threaten to turn that percentage into pennies, shrinking the economic pie that acquirers and card-linked fintechs divide. That shift, more than headcount discipline, may define the company’s next chapter.

A recent note from Citrini Research titled “When Friction Went to Zero” argues that the rise of agentic shopping — where AI assistants autonomously compare prices, optimize payment routes, and execute transactions on behalf of users — could accelerate the shift away from card networks and toward stablecoin rails.

Advertisement
(Citrini Research)

In that environment, settlement happens in seconds at near-zero cost, and machines prioritize price and speed over brand loyalty or checkout design.

The 2% to 3% merchant fee that sustains the traditional payments stack becomes harder to justify when an AI agent can route the same transaction for pennies, leaving companies like Block exposed to structural margin compression rather than temporary competitive pressure.

This is not Block’s first attempt at resizing. In early 2024, the company began cutting staff under a previously disclosed plan to reduce headcount by as much as 10%, capping its workforce at 12,000 after ballooning to roughly 13,000 in 2023.

At the time, Dorsey acknowledged that “the growth of our company has far outpaced the growth of our business and revenue,” framing the move as a correction to pandemic-era over expansion.

The latest reduction, far deeper at nearly 40%, suggests the recalibration is no longer just about aligning costs with revenue, but about adjusting to a payments landscape where fee compression could be structural.

Advertisement

Investors cheered the move, sending Block shares up more than 23% in after-hours trading as the market rewarded the aggressive cost reset. Even so, the stock remains roughly 80% below its pandemic-era peak, underscoring how far expectations have reset since the hiring boom.

Stablecoins already existed during that expansion, but they were largely viewed as crypto trading instruments rather than a credible payments threat.

Only recently, with regulatory clarity advancing through measures like the GENIUS Act and Circle’s IPO elevating stablecoins into the mainstream financial system, have dollar-backed tokens begun to look like a plausible alternative to the card-based rails that underpin Block’s business.

“Maybe Block laying off a ton of employees is a sign that AI is gonna destroy everything,” financial analyst Ben Carlson, director at Ritholtz Wealth Management, posted on X.

Advertisement

“Or maybe the stock is down 80% from the highs and they overhired and AI is a convenient excuse,” he wrote.

Source link

Continue Reading

Crypto World

Catapult: Fixing Fair Launches – Smart Liquidity Research

Published

on

Catapult: Fixing Fair Launches - Smart Liquidity Research

Crypto loves the word “fair.”
Fair distribution. Fair pricing. Fair access.

But let’s be honest—most token launches are anything but.

Enter Catapult, a launchpad designed to eliminate early sell pressure, slash launch costs, and automate liquidity in a way that aligns creators, traders, and the protocol itself. It replaces chaotic day-zero market mechanics with something far more deliberate: algorithmic price action, volume-based graduation, and built-in revenue sharing.

This is not another “launch and pray” platform.
It’s a structured proving ground.

The Core Thesis: Volume Before Liquidity

Traditional launches start with liquidity.

Advertisement

That’s the mistake.

Liquidity pools on day zero invite:

  • Snipers

  • MEV extraction

  • Presale dumps

  • Rugpull vectors

  • High overhead costs

Catapult flips the sequence:

Volume first. Liquidity later.

Advertisement

Instead of throwing a token into an on-chain pool and hoping for the best, Catapult begins in a simulated high-fidelity environment called Turbo, where tokens can build mindshare and trading volume without ever touching a liquidity pool.

Only when a token proves demand does it graduate into a real, on-chain market via Hyper.

This single design decision changes everything.

Catapult Turbo: The Sandbox That Solves Day Zero

Catapult Turbo is a gamified trading environment that replaces traditional on-chain mechanics with a deterministic mathematical price engine.

Advertisement

There is:

  • No order book

  • No initial LP

  • No slippage

  • No liquidity to drain

Instead, Turbo streams hyper-volatile, realistic price action generated by a mathematical engine. Traders buy and sell exactly like on a spot exchange—but execution is instant and slippage-free.

Every trade settles directly against the protocol vault.

Why This Matters

Because price movement is decoupled from liquidity:

Advertisement

Creators simply choose a volatility tier, pay a flat fee, and let the session run.

The Turbo Mechanic: Controlled Chaos

Each Turbo session runs inside a fixed time window.

When creating a token, a creator selects a volatility mode that defines:

Type Speed Multiplier Lifetime Daily Sigma
Slow 6x 4 hours 0.5
Fast 24x 1 hour 1.0
Flash 96x 15 min 1.25
Crack 480x 3 min 1.5
Mayhem 1440x 1 min 1.25

All tiers use a daily drift of zero, ensuring a mathematically neutral starting point.

Advertisement

The result?
Pure volatility. No bias.

Turbo is not gambling disguised as trading. It’s a structured, deterministic price evolution with unpredictable outcomes—verified through cryptographic commitment.

Path Generation & Commitment: Provably Untampered Markets

When a creator launches a Turbo session:

  1. The engine generates a random seed.

  2. It pre-calculates the entire price path.

  3. A secret salt is created.

  4. The seed, salt, and tick parameters are hashed.

  5. The hash is published before trading begins.

This hash becomes an immutable anchor.

Advertisement

As the session unfolds, ticks stream to the UI.
The underlying seed and salt remain hidden.

When the session expires, the engine reveals everything.

Anyone can recompute the hash.
If it matches, the chart wasn’t altered.

The path is deterministic—but unknowable until complete.
Even the development team cannot alter it.

Advertisement

That’s not “trust us.”
That’s mathematical finality.

Public vs Private Tokens: Controlled Attention

Catapult separates tokens into two categories:

Public Tokens

  • Indexed in the discovery feed

  • Generate a 0.5% fee on all trade volume

  • Fee paid directly to the creator

  • Subject to a global cap on concurrent sessions

This cap prevents fragmentation and keeps the trader’s attention dense.

Private Tokens

It’s a clever balance between open competition and personal experimentation.

Advertisement

From Simulation to Reality

Turbo is not the endgame.

It’s the proving ground.

A Turbo token must hit a predefined volume milestone to graduate.

When that threshold is reached, the token transitions into the on-chain ecosystem.

Advertisement

And here’s the key difference:

  • There are no presale allocations.

  • No early insiders waiting to dump.

  • No liquidity seeded by a fragile team wallet.

Instead:

The entire supply is minted directly into the pool.
Liquidity is sourced from the volume generated during Turbo.

The community that built the volume becomes the on-chain market.

Advertisement

Graduation is handled through a time-windowed launch mechanic that prevents sniping and ensures equitable access.

This is what automated fair launches actually look like.

Catapult Hyper: Production-Grade Infrastructure

Once graduated, tokens move into Catapult Hyper, the on-chain infrastructure layer built on:

Hyperliquid provides the L1 trading environment.
LayerZero enables seamless multichain interoperability.

Advertisement

Together, they eliminate liquidity fragmentation.

Multichain Without the Mess

Tokens launched via Hyper are deployed as OFTs (Omnichain Fungible Tokens).

This means:

  • Unified supply across chains

  • No risky third-party bridges

  • No wrapped fragmentation

  • Seamless multichain liquidity

The Hyper terminal becomes a discovery engine—connecting creators, traders, and the broader ecosystem in a compounding value loop.

Advertisement

The Bonding Mechanism: Liquidity That Scales With Conviction

Hyper replaces static fundraising with a dynamic liquidity bootstrap model.

Capital requirements scale with market cap.

As mindshare grows, liquidity requirements grow.

Every launch follows strict 48-hour windows:

Advertisement

Initial Phase
48 hours to hit the primary goal.

Reactivation
If missed, a second round opens with increased contribution requirements.

Retirement
Failure in the second round permanently ends the campaign.

No zombie tokens.
No endless relaunches.
Only velocity survives.

Advertisement

Automated Liquidity & Real Yield

Once bonding completes:

  • Liquidity pools initialise automatically.

  • LP deployment is non-custodial.

  • No manual management required.

Rewards are funded by actual platform activity—trading volume and engagement—rather than inflationary emissions.

Participants earn a real yield derived from protocol usage.

That’s a subtle but important difference.

Advertisement

Emission-based systems inflate.
Activity-based systems compound

Revenue Sharing: Incentives Aligned by Design

Catapult does not rely on extractive fee models.

Instead, it distributes value across four roles:

  • Traders

  • Creators

  • Referrers

  • Mindshare contributors

Rewards are epoch-based:

Advertisement

The Mindshare system tracks social visibility using an exponential decay model:

user_score += twitter_scout_score × k^(n−1)
Where k = 0.8

Recent activity matters more.
Sustained contribution wins.

And only the Top 100 qualify for mindshare rewards.

Advertisement

It’s competitive.
It’s measurable.
It’s performance-driven.

The Bigger Picture

Catapult is transitioning from a Solana-centric origin into a full multichain discovery terminal. A lightweight Hyper terminal is already live, enabling trading of graduated tokens ahead of the full LayerZero-native launchpad.

The architecture reflects a clear philosophy:

  • Simulate before you tokenise.

  • Prove demand before you deploy liquidity.

  • Align incentives before you scale.

Most launchpads optimise for speed.

Advertisement

Catapult optimises for survivability.

And in crypto, survivability is alpha.

In Summary

The industry doesn’t need another place to launch tokens.

It needs infrastructure that filters noise, protects participants, and rewards real engagement.

Advertisement

Catapult’s Turbo-to-Hyper pipeline does exactly that.

Volume becomes proof.
Graduation becomes merit.
Liquidity becomes earned.

That’s not hype.
That’s architecture.

CATAPULT OFFICIALS

Website | X(Twitter) | Telegram

Advertisement
REQUEST AN ARTICLE

Source link

Continue Reading

Crypto World

Strategy Eyes More Bitcoin as Saylor Teases Bigger Bag

Published

on

Nexo Partners with Bakkt for US Crypto Exchange and Yield Programs

TLDR

  • Michael Saylor hinted at more Bitcoin purchases as the asset traded near $67000.
  • Strategy currently holds 718722 BTC valued at about $48 billion.
  • The company bought its Bitcoin at an average price of around $76000.
  • Strategy faces an unrealized loss of about 12% on its holdings.
  • Saylor said Bitcoin allows $1 billion to move globally with ease.

Bitcoin traded near $67,000 as Michael Saylor signaled continued accumulation through a new social media post. He shared an image showing himself carrying a large orange bag covered with Bitcoin logos. He added the caption, “Maybe I need a bigger one,” and implied further purchases.

Bitcoin Holdings and Accumulation Strategy

Saylor posted the image on X as Bitcoin attempted to stabilize around $67,000. He used the visual to reinforce the strategy’s ongoing acquisition plan. The caption suggested that the company may expand its holdings further.

Strategy currently holds 718,722 BTC worth about $48 billion at current prices. The company acquired its holdings at an average price of $76,000. Therefore, Strategy holds an unrealized loss of roughly 12% on its position.

Despite the paper loss, Strategy reports an mNAV ratio near 1. The company also lists an adjusted enterprise value multiple of 1.256. These figures reflect the firm’s market valuation relative to its Bitcoin reserves.

Saylor has maintained a consistent position on long-term holding periods. He has stated that investors should prepare to hold Bitcoin for seven to ten years. He continues to frame corrections as part of the asset’s normal cycle.

Advertisement

Strategy reports its Bitcoin transactions weekly when activity occurs. Market participants expect the next update in the coming days. The company has not disclosed any new purchases this week.

Strategy World 2026 and Market Performance

Strategy hosted Strategy World 2026 earlier this week. During the event, Saylor repeated his view that Bitcoin represents digital capital. He said, “Bitcoin’s value lies in its ability to move one billion dollars anywhere in the world.”

He contrasted Bitcoin transfers with traditional asset transfers. He said moving large sums in traditional systems involves greater complexity. He emphasized practical capital mobility rather than abstract narratives.

Saylor also addressed Bitcoin’s price volatility during the event. He stated that volatility limits large capital inflows. He argued that fluctuations, not structural flaws, remain the main challenge.

Advertisement

Meanwhile, Strategy’s stock MSTR trades at $132.8. The shares have fallen 12.6% year-to-date in 2026. The stock remains 75.8% below its all-time high of $542.

Goldman Sachs has identified MSTR as the most shorted stock in the market. The company continues to tie its equity performance closely to Bitcoin holdings. Strategy plans to release further updates on Bitcoin activity next week.

Source link

Advertisement
Continue Reading

Crypto World

Circle Reveals Plans for Native Arc Token

Published

on

Circle Reveals Plans for Native Arc Token

Circle is advancing its Arc blockchain project, with plans for a native token, according to CEO Jeremy Allaire.

Circle, one of the largest stablecoin issuers in the industry, is exploring the possibility of a native token for its Arc blockchain, according to the company’s chief executive Jeremy Allaire.

During the company’s Q4 2025 earnings call, Allaire said Circle is exploring a native token for the Arc blockchain and that the company is gaining a strong understanding of how it would work.

“We’re getting a very good understanding of how a token can play a key role in providing stakeholder incentives, governance, security, utility and other things on the Arc network,” Allaire said, though no timeline for a launch was revealed.

The company launched the public testnet for Arc in October 2025, with plans for a full mainnet release expected later this year.

Advertisement

Circle announced Arc in August last year, designing the network specifically for issuing and transacting stablecoins. As The Defiant reported, the network would focus on faster settlement and lower transaction costs compared with existing public blockchains.

Kevin Lehtiniitty, CEO of Borderless.xyz, told The Defiant last year that the competition for the “stablecoin chain” just brings the industry back to fragmented payment systems with new branding. As Lehtiniitty explained, “The answer that does push open finance forward in my mind is connectivity and interoperability; not another chain or another token.”

This article was generated with the assistance of AI workflows.

Source link

Advertisement
Continue Reading

Crypto World

Buterin Outlines Ethereum’s Quantum Resistance Roadmap

Published

on

Buterin Outlines Ethereum’s Quantum Resistance Roadmap

Ethereum co-founder Vitalik Buterin has identified and proposed a plan to address four areas of the network that he sees as most quantum-vulnerable.

Quantum computing and crypto have been in the headlines recently as concerns mount over Bitcoin and other blockchains’ resistance to quantum-capable supercomputers.

Buterin posted his quantum resistance roadmap for Ethereum on Thursday, stating that the four areas are: validator signatures, data storage, user account signatures, and zero-knowledge proofs.

He said that replacing the current BLS (Boneh-Lynn-Shacham) consensus signatures with “Lean” quantum-safe hash-based signatures would fix that component. The tricky part is picking the right hash function, since this choice will likely stick around for a long time.

Advertisement

“This may be ‘Ethereum’s last hash function’, so it’s important to choose wisely,” he said. 

Ethereum Foundation researcher Justin Drake proposed “Lean Ethereum,” a plan to make the network quantum-secure, in August 2025. 

Quantum safe data storage and accounts  

Regarding data storage, or “blobs”, Ethereum currently uses a system called KZG (Kate-Zaverucha-Goldberg) for storing and verifying data. 

The plan is to swap this out for STARKs (Zero-Knowledge Scalable Transparent Argument of Knowledge), which are quantum-resistant. “It’s manageable, but there’s a lot of engineering work to do,” said Buterin.

Advertisement

Related: Buterin outlines 4-year roadmap to speed up and quantum-proof Ethereum

The third challenge is user accounts. Ethereum currently uses ECDSA (Elliptic Curve Digital Signature Algorithm) signatures, which are standard cryptographic keys. The fix is to upgrade the network so that accounts can use any signature scheme, including “lattice-based” quantum-resistant ones.

However, quantum-safe signatures are much heavier computationally and would consume more gas.

“The long-term fix is protocol-layer recursive signature and proof aggregation, which could reduce these gas overheads to near-zero,” he said. 

Advertisement

Quantum-resistant proofs are very expensive 

Quantum-resistant proofs are extremely expensive to run onchain so “the solution again is protocol-layer recursive signature and proof aggregation,” said Buterin.

Instead of verifying every signature and proof individually onchain, a single master proof or “validation frame” would verify thousands of them at once, keeping costs near zero.

“This way, a block could ‘contain’ a thousand validation frames, each of which contains either a 3kB signature or even a 256kB proof,” he explained. 

Buterin floated the concept of a recursive-STARK-based bandwidth-efficient mempool in January. Source: ETHresearch

Buterin also commented on the Ethereum Foundation’s “Strawmap” on Thursday, stating that he expects to see “progressive decreases of both slot time and finality time.” 

Magazine: Bitcoin may take 7 years to upgrade to post-quantum: BIP-360 co-author

Advertisement