Ethereum puts a date on quantum resistance: December 2029
The Ethereum Foundation has set a hard deadline for one of the protocol’s longest-running existential questions. Fredrik Svantes, who leads protocol coordination at the Foundation, said the Protocol Cluster is aggressively targeting a quantum-resistant Layer 1 no later than December 2029. The commitment appeared in a September 7 post on X alongside two newly published articles covering the upcoming Hegotá upgrade and the long-term priorities for Ethereum’s base layer.
Ethereum is not quantum-resistant today. Its account and validator systems rely on cryptographic methods that future quantum machines could potentially break, though the Foundation’s own quantum-resistance documentation notes that existing hardware remains far below the capacity required for such an attack. The new timeline converts what had been an open-ended research track into a dated engineering commitment, one that Svantes said will shape which proposals the teams recommend for Hegotá and how they evaluate other protocol work.
Rating 62 proposals with 397 assessments
Alongside the quantum deadline, the Foundation published ratings for all 62 Ethereum Improvement Proposals under consideration for Hegotá, the network upgrade planned for 2027 after Glamsterdam in the fourth quarter of 2026. The evaluation, called the Hegotá EIP Opinion Post and Tier List, is the Protocol Cluster’s first shared tier list covering a single network upgrade. Around 60 researchers, engineers, and specialists from nine Protocol Cluster teams submitted 397 individual ratings.
Participants also held live discussions about proposals that produced differing opinions, allowing teams to compare technical benefits, development costs, and possible conflicts before Hegotá’s scope is settled. The Foundation stressed that the ratings do not guarantee any of the 62 proposals will reach mainnet. The list records how Protocol Cluster members view each change while client developers, researchers, and the wider community continue assessing what can be built and tested within the development schedule. Execution client teams were separately asked to rank their preferred Hegotá proposals by September 10.
As of August, the official meta EIP listed EIP-7805, known as Fork Choice-enforced Inclusion Lists or FOCIL, as the only feature formally scheduled for inclusion. FOCIL would allow a committee of validators to publish lists of eligible transactions that block builders should include, with attesters able to reject blocks when builders improperly omit listed transactions. The design aims to reduce the influence of concentrated block-building infrastructure over transaction inclusion. Previous discussions have also covered competing designs for native account abstraction, shorter slot times, state-growth pricing, privacy tools, and changes to validator incentives.
Why the migration is harder than swapping one algorithm
Preparing Ethereum for quantum adversaries involves far more than replacing a single signature scheme. Researchers have divided the work across user accounts, validator signatures, consensus, data availability, and zero-knowledge proof systems, each carrying different performance and migration requirements. Every subsystem that currently depends on elliptic-curve cryptography needs its own path to post-quantum alternatives, and those paths interact.
Account-level experiments have already started. In June, an Ethereum researcher known as Nico described how users could add post-quantum protection through smart contract logic for roughly 0.07 USD per account, without waiting for a hard fork, using SPHINCS-based signatures. That approach protects individual accounts but would not make the entire network resistant to quantum attacks.
A draft submitted on August 24 addresses another part of the migration: validator deposits. Under the proposed design, a replacement validator deposit contract would accept variable-length public keys and assign identifiers to different signature systems. The first identifier would preserve Ethereum’s existing BLS deposits, while later identifiers could support post-quantum signature schemes. The proposal deliberately does not select a replacement algorithm, and Ethereum would still need a consensus-layer change to verify and process signatures created under any new system. Developers have also described an irreversible migration switch that could eventually stop new BLS deposits after an agreed threshold, forcing the network through a one-way door once post-quantum validator support is ready.
The clock is now public
Setting December 2029 as the deadline does two things. Internally, it forces prioritization: proposals that help the quantum migration now have a reason to jump the queue in Hegotá and successor forks. Externally, it gives institutional users, staking operators, and wallet developers a planning horizon for a transition that will eventually touch every account and validator on the network.
The Foundation is hosting a Reddit AMA on September 16 to cover the tier list and Ethereum’s protocol priorities, giving the community a direct chance to challenge both the ratings and the roadmap. Ethereum’s public roadmap remains open to revision, since every upgrade requires implementation, development networks, public testnets, and client coordination before mainnet activation. But for the first time, the endgame for quantum resistance on Ethereum has a date attached to it.
Market snapshot at time of writing: Bitcoin trades near 78,400 USD, Ethereum around 2,474 USD, and Solana near 103 USD.
Disclaimer: This article is for informational purposes only and does not constitute financial advice.
December 2029 for quantum resistant L1 feels late until you remember nobody has a credible threat model before then. Better a dated commitment than another decade of open-ended research.
Svantes saying the deadline shapes which proposals get recommended for Hegota is the real signal. 2029 forces prioritization now, not in 2028.
397 assessments across 62 proposals for Hegota is wild transparency. A tier list for EIPs is not something I expected from the Foundation but I will take it.
397 assessments for 62 proposals and the deadline is the part people argue about. dec 2029 for stake migration across every validator set is tight but at least its a real date
62 Hegotá proposals rated and still no clear winner says a lot about how unsettled the PQ story is. Dec 2029 is ambitious
people acting like a CRQC shows up tomorrow. we have years of warning runway, the deadline reflects that
warning runway assumes we see the CRQC coming. anything signed today with current signatures does not get that luxury, its retroactively forgeable later
thats the part people miss, harvest now decrypt later means old signatures are already on a clock. dec 2029 might even be optimistic for that reason alone
thats the part people miss, harvest now decrypt later means old signatures are already on a clock. dec 2029 might even be optimistic for that reason alone
this. anyone who signed anything sensitive today should assume the signature outlives the migration deadline. the chain being safe in 2029 doesnt protect 2026 signatures
which is why the deadline covers new signatures, not old wallets. retroactive exposure is unfixable, the EIP just stops adding to the pile
exactly the point, anything exposed today with ECDSA sits on a clock that started the day it was signed. 2029 protects the chain, not the old signatures
also no winner yet means whatever gets picked has to survive devnet after devnet of migration testing. moving stake to new keys without slashing incidents is the scary part
moving live validator keys to new crypto without slashing incidents is the part that keeps core devs awake. devnets help but mainnet stake at scale is a different animal
counterpoint, 62 proposals is a healthy funnel. you want the losing 55 to exist, means they stress tested the field instead of picking a favorite early
a 62 proposal funnel is healthy until one gets picked and 61 teams are still on the payroll lol. transparency still beats a closed process tho
svantes putting an actual date on it is progress at least. vague timelines were getting old
meanwhile every fork of the L1 has to be PQ aware too or the deadline slips. coordination is the hard part, not the math
62 proposals, 397 assessments and a dec 2029 date is the most concrete the foundation has ever been on PQ. credit where due
Svantes putting his own name on a hard deadline is the real story. Foundation timelines used to be written in fog.
dec 2029 means every wallet, every L2 bridge and every hardware wallet firmware ships key migration inside roughly 3 years. the EIP is the easy part, the UX migration is the war
hardware wallets are the scary part. getting normies to regenerate keys in 3 years when they lost their seed phrase back in 2021… good luck with that migration
wallets already ship migration prompts nobody reads. rotating millions of mostly dormant keys to lattice schemes before dec 2029 without a support apocalypse is the real deliverable
the war has a hard fail state too. ledger ships PQ firmware but the 2021 seed in a drawer stays ECDSA forever and nobody can force a rotate
397 assessments to narrow 62 proposals is real process weight. better than two devs picking the scheme over a weekend