Ethereum validators sign with BLS keys, and a large enough quantum computer running Shor’s algorithm could in theory forge those signatures. Two efforts now aim to close that gap. On September 7, 2026, the Ethereum Foundation posted “EF Protocol: Current and Emerging Priorities,” which says Ethereum L1 aims to be quantum-resistant across execution, consensus and data by December 2029 and calls early shipping “the strategically responsible thing to do.” Separately, a draft proposal reported by CoinDesk would rebuild the validator deposit contract so it can accept other signature schemes later. Both are plans, not shipped features.
| Works well | Be careful |
|---|---|
| A stated target for all three layers (execution, consensus, data): December 2029 | The target can be revised, and the Foundation has already committed to a January 2027 review |
| The staking draft launches with BLS deposits still active, so nothing breaks on day one | The draft has no confirmed fork, and a separate change is still needed to tell validators how to verify new signature types |
| Frame transactions would let accounts swap signature schemes without a hard fork per scheme | Consensus cryptography can change only through a hard fork, and the schedule needs five of them after Glamsterdam |
| A fallback layer (MV-PQ) is planned to keep Ethereum running through Q-day | That fallback offers reduced guarantees, and researchers are still defining them |
The verdict: this is a serious, specific plan with an honest admission that the schedule is tight. It is not a finished defense. The Foundation itself calls its own assumption “deliberately aggressive,” and past Ethereum forks have slipped, including Glamsterdam. Read December 2029 as a goal, not a promise.
Who Benefits and How
If the plan lands, people who hold or stake ETH would be protected from signature forgery without having to do anything now. No action is needed from stakers today, and under the staking draft existing BLS validators would keep operating until a future hard fork handles the switch. Developers and wallet builders would get accounts that can change their approval cryptography. The Foundation post describes frame transactions and a public-key registry but does not promise addresses stay the same, so wait for final specifications before assuming anything about your own address.
Where the December 2029 date comes from
The Foundation says its date lines up with 2029 migration targets that Google, Cloudflare and Microsoft set independently. Separately, it says Ethereum L1 “should plan for Q-day happening as early as 2030” and calls that “a deliberately aggressive assumption.” Those are planning inputs, not a prediction that a quantum machine will appear in 2030. The target is “non-negotiable at least until January 2027,” when the Foundation plans to reassess quantum progress with outside experts.
Q-day estimates vary widely, from that planning assumption of 2030 to a 2028 to 2035 range in one source. Treat them as ranges, not forecasts.
What would change, layer by layer
- Execution: leanSPHINCS transactions, a hash-based signature scheme, are planned at milestone J*. Native account abstraction through frame transactions would let accounts swap signature schemes.
- Consensus: a post-quantum heartbeat at J*. Post-quantum attestations are still needed for full economic finality.
- Data: leanDA sampling at J*.
- Shared: a post-quantum public-key registry at I*.
- Fallback: MV-PQ, a minimum viable post-quantum layer meant to keep Ethereum running through Q-day with reduced guarantees.
The staking draft (EIP-8394)
CoinDesk reports that the draft is filed under a placeholder number and that a repository maintainer suggested it become EIP-8394. Today the deposit contract accepts only BLS keys, because their size is hard-coded, and that blocks new signature types. Under the draft:
- Each deposit would carry a tag naming its signature scheme. BLS gets tag zero, and later tags are reserved for future schemes.
- It would launch with BLS deposits still active and other schemes able to register alongside them.
- A later decision could stop new BLS deposits.
- Deposits would move onto the newer framework that already handles withdrawals and validator changes, retiring the deposit processing used since 2022.
CoinDesk also notes that frame transactions (EIP-8141) would let ordinary accounts change their approval cryptography without moving to a new address. The Foundation lists the same frame transactions as a Hegotá headliner.
The fork schedule and the size of the risk
The Foundation post targets Glamsterdam for December 2026. It says client teams can realistically begin Hegotá implementation in late Q4 2026, and that Hegotá, with FOCIL and frame transactions as headliners, “is the fork that decides whether the PQ forks happen on time.” Reaching milestone L* by December 2029 means five hard forks after Glamsterdam, an average of 7.2 months each (arithmetic from the schedule), which the post calls “quite aggressive.” If two milestones are swapped, the cadence stretches to about nine months. Ethereum.org expects Hegotá mainnet in Q2 2027 and says the date is not confirmed. For the wider schedule, see our roadmap overview.
CoinDesk says about 42.4 million ETH, worth roughly $104 billion at the time of its report, is staked behind BLS keys. The ETH count is the steadier number, since the dollar value moves with price. It also relays Google Quantum AI research from March 2026 that mapped five quantum attack paths against Ethereum, with more than $100 billion in assets at potential risk. That is a risk estimate, not a loss that has occurred. Crypto Briefing adds that Google estimates about 1,200 logical qubits could break 256-bit elliptic-curve cryptography, and reports that about 65 percent of ETH sits in quantum-vulnerable addresses. We did not find that last figure in the Foundation post, so treat it as a third-party estimate. No quantum machine capable of this exists today. The sources we opened do not say the staking draft is weighed for Hegotá in 2026, and they give no figures on exit queue times.
Quick answers
Is Ethereum quantum-safe now? No. The plan targets December 2029 and depends on several hard forks.
Is EIP-8394 approved? No. It is an early draft circulating among developers, with no confirmed fork.
What is leanSPHINCS, and should I buy or sell ETH because of this? leanSPHINCS is a hash-based signature scheme listed for execution-layer transactions, and hash-based schemes do not rely on elliptic-curve math. As for trading, this article reports engineering plans and is not investment advice.
Sources
- Ethereum Foundation Blog: EF Protocol, Current and Emerging Priorities (Sep 7, 2026)
- Crypto Briefing: Ethereum Foundation Sets Deadline for Quantum Resistance by 2029 (Sep 8, 2026)
- ethereum.org: Hegotá Roadmap (accessed Oct 13, 2026)
- CoinDesk: Ethereum Developers Propose First Step to Protect ETH Staking From Quantum Attacks (Aug 26, 2026)
- Crypto Briefing: Ethereum Developers Propose Measures to Secure ETH Staking Against Quantum Threats (Aug 26, 2026)