As the threat of quantum computing is set to shake Ethereum’s cryptographic underpinnings, the development team led by Buterin has begun to launch a comprehensive defensive strategy.

This story is, in fact, quite serious. If a quantum algorithm called Shor’s algorithm is executed on a sufficiently powerful quantum computer, it could potentially destroy all the cryptographic pillars that currently protect Ethereum—such as BLS signatures, KZG, ECDSA, and zero-knowledge proofs. According to estimates from the research platform Metaculus, the probability that such machines will be realized by 2030 is 20%. In other words, there is a possibility that the quantum threat could become reality within the next four years.

At Devconnect Buenos Aires last month, Buterin even warned that elliptic curve cryptography could break down before the 2028 U.S. presidential election. In response, the Ethereum Foundation has already set up a post-quantum security team in January 2026, led by Thomas Coratoger. A research budget of 2 million dollars has also been allocated.

The roadmap implements a comprehensive post-quantum cryptography stack called ETH2030. It includes six quantum-resistant signature algorithms and is a system composed of 46 source files. The development team has run tests across 48 packages and has successfully passed more than 20,900 tests. On February 27 of last month, the system was already operating normally on the Kurtosis devnet, clearing block generation and verification of new precompiles.

There are, however, challenges. The verification cost for quantum-resistant signatures is enormous. While ECDSA would be about 3,000 gas, quantum-resistant checks could reach 200,000 gas. To address this, recursive STARK aggregation is used to counter quantum attacks such as Shor’s algorithm while maintaining gas efficiency. By compressing multiple signatures into a single proof, on-chain costs can be significantly reduced.

On the EVM layer, 13 custom precompiles will be added—tools that accelerate lattice-based encryption and STARK proof verification. On the consensus layer, a dual-signature scheme combining post-quantum cryptography with traditional cryptography will be introduced, enabling validators to transition gradually. For data availability, KZG commitments will be replaced with Merkle-based and lattice-based alternative methods.

The strength of this overall migration strategy is that it can move forward while avoiding sudden disruption. Through a phased approach, the network aims to achieve a complete transition to quantum resistance while preserving stability. All new features are scheduled to be enabled at the I+ fork level.

To be honest, the speed of this response is impressive. The fact that Ethereum has already put its defenses in place before the threat of Shor’s algorithm becomes a reality is a major reassurance for the entire industry. It is also evidence that the security of crypto assets is genuinely evolving.