While the crypto world argues over whether artificial intelligence could crack the encryption protecting Bitcoin and Ethereum, a team of Zcash developers says it is already building the defense — with post-quantum signatures expected to land in the privacy coin’s network in January.
By Keisha Williams | October 13, 2026
The team, called Zakura, builds a full node for Zcash — software that stores and verifies the network’s entire transaction history. According to Decrypt, Zakura says it expects post-quantum signature opcodes to arrive in Zcash in January, enabling hash-based signatures for the network’s transparent payments. For regular investors, this is an early look at how every major blockchain may eventually have to armor itself.
The Hook: Why Everyone Is Suddenly Talking About Quantum Risk
The panic started with Justin Drake, a researcher at the Ethereum Foundation. Drake warned that AI-driven advances in mathematics could break the ECDSA signatures — the digital signatures that prove ownership of Bitcoin and Ethereum wallets — before quantum computers even get the chance, “in the worst case in months not years.” He urged holders to calmly move funds to fresh addresses, a strategy nicknamed “bunker mode.” The public response, Decrypt notes, was anything but calm.
Ethereum co-founder Vitalik Buterin has since weighed in, saying he believes it is “plausible” that AI-driven math breakthroughs could break current encryption within the next two years. Nobody knows for certain whether or when this happens. But the debate has made one thing obvious: networks that wait to plan their defenses until the threat arrives will be too late.
On-Chain Evidence: How the Zcash Plan Actually Works
Zcash has two kinds of payments: shielded ones that hide the sender, recipient, and amount, and transparent ones that are publicly visible, much like Bitcoin’s. Zakura’s plan targets the transparent side first, combining two defenses, per Decrypt’s report:
- Address rotation — wallets would automatically switch to a fresh address after every transaction, keeping public keys hidden. A transparent address contains a hash of a public key, which stays secret until the owner spends from it and reveals the key on the blockchain.
- Hash-based signatures (WOTS) — a backup signature type that avoids the elliptic-curve math researchers fear AI or quantum computers could eventually crack. The goal, according to an engineering post by Roman Akhtariev, is “full post-quantum safe transparent pools with hash based signatures.”
- Private information retrieval (PIR) — rotating addresses creates a privacy leak: when a wallet asks a server to check balances across many addresses, the server can link them to one user. PIR is a technique that lets a wallet fetch its records without revealing which ones it is requesting.
The PIR feature is not a distant promise — it is rolling out this week in the Vizor wallet, where users can already test it by toggling “private queries” in the settings. In simple terms, it is like checking your bank balance without the bank knowing which account belongs to you.
The Core Conflict: Engineering Versus Alarmism
Zakura’s approach is a direct answer to the bunker-mode crowd. “While others are worrying about the viability of rotating transparent addresses, we’re already solving linkability,” the team wrote on X. The subtext: panic-driven address migration creates privacy and usability problems of its own, and the right fix is built into the network’s design rather than improvised by frightened users.
There are important caveats. The plan covers only Zcash’s transparent payments, not the shielded pools the coin is famous for, and the announcement gave no network-wide activation date. Expecting opcodes in January is a schedule, not a guarantee. But as a proof that quantum defense can move from debate stage to shipped wallet features, it stands out.
Market Implications: Privacy Coins Are Getting Serious Upgrades
The timing matters beyond security. Zcash has been drawing growing institutional interest: Decrypt reports another proposed U.S. Zcash ETF tied to the Winklevoss twins, plus Europe’s first Zcash ETP. The network also recently shipped an upgrade designed to make private payments three times faster. For a coin long treated as a regulatory pariah, the combination of Wall Street products and cutting-edge cryptography is a striking turn.
There is a broader signal here too. If AI-assisted cryptanalysis becomes a real threat, every blockchain will need its own version of this migration — new signature schemes, careful wallet design, and years of lead time. The networks that start now, like Zcash claims to be doing, will be the ones users can still trust later.
The Verdict: What This Means For You
For now, nothing is broken, and no action is required from ordinary holders. The threat is theoretical, the timeline debated, and the fixes still arriving. But two habits are worth adopting regardless of which coins you own. First, avoid reusing addresses — it is good privacy hygiene today and will matter more tomorrow. Second, pay attention to whether the networks you invest in have a public, concrete plan for post-quantum security, not just reassurances.
Zcash, via Zakura, has at least put a date on part of its plan: January for post-quantum signature opcodes, and a privacy feature in wallets this week. That is more specificity than most networks have offered. Watch whether it ships on time — and whether Bitcoin and Ethereum follow with concrete roadmaps of their own.
The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.
Address rotation after every spend is the part that actually matters here. Hiding public keys until you spend is the only real defense while ECDSA still holds.
zcash shipping quantum safe signatures by january while ethereum writes forum essays about bunker mode is the most zk thing imaginable. just build it
drake’s warnings spooked everyone but targeting the transparent pool first is the pragmatic call. shielded users keep their privacy while the visible surface gets hardened
hardening the transparent pool first is the correct triage imo. that is where a harvest attack could actually sweep exposed keys at scale
January is an aggressive timeline for WOTS opcodes. Zakura shipping full node support alongside makes this feel less like vaporware than the usual post-quantum roadmap slides.
Agreed. Vitalik calling an AI math break plausible within two years is what pushed this from academic talk to something networks actually have to plan for.
vitalik saying two years is what changed my mind on january being early. bunker mode essays vs wots opcodes, ill take the opcodes
same switch for me. drake writing calm down essays while zakura just schedules opcodes for january tells you which culture actually ships under deadline pressure
hash based sigs are chunky though, every tx carries way more bytes than a schnorr. curious what that does to fees on a chain where shielded txs already cost more
bigger sigs mostly hit block space and sync time, not your wallet directly. node operators are the ones who will feel the extra data first
ran the numbers once, a WOTS sig is like 20x a schnorr. if zcash eats that on every transparent tx the fee market gets weird fast
20x on transparent only though, shielded pool stays on the current scheme. so the fee weirdness is capped at the transparent share of txs
a january deadline on a signature scheme migration is brave. most chains need six months of debate to ship a routine upgrade
six months of debate is optimistic. the last network upgrade slipped twice, a january date assumes zero coordination problems across the whole ecosystem
brave if starting from scratch. announcing january this casually usually means the sig scheme has been running on a testnet for months already
counterpoint to the testnet theory, zakura is a full node team, they dont control activation. if the zip process drags the january date drags with it
Zcash ships on a schedule historically, the network upgrades mostly landed close to target. If any chain can do january its this one
Drake saying months not years and then telling people to stay calm in the same breath is funny. Bunker mode only works if you have clean addresses ready to move to.
the bunker mode essay spent 800 words saying keep calm and rotate addresses. zcash just went and scheduled signatures. actions vs essays i guess
the essay exists because eth has 100x the value to coordinate. zcash shipping first is easier when your holder base fits in one telegram, scale changes everything
fair, but eth coordination includes convincing half a trillion in tvl to migrate. zcash moving first still buys everyone the testnet data for free
Every spend leaks the public key, so quantum risk piles up in old dust addresses forever. Rotation helps going forward but the reused addresses from 2016 are still sitting there exposed.
Exactly. Migration only protects coins that actually move. The 2016-era reused addresses stay exposed until someone sweeps them, quantum timeline or not.
everyone dunking on the january date but zakura is a full node team, they cant ship opcodes without the zip process anyway. the date is probably network activation, not their code
if january slips to network activation timing people will still call it late. shipping the code and waiting on ZIP votes is honest sequencing even if the headline oversells it
transparent pool first is smart but those sigs are chunky, a wots signature eats way more block space than a schnorr. zcash node operators are the real test case here
block space is the sleeper issue, a wots tx is what, 10x the bytes. transparent pool first keeps shielded pools usable while the kinks get worked out