Ethereum proposes quantum-proof staking upgrade to protect $104B in ETH

Ethereum developers propose rebuilding the validator deposit contract, preparing the network's $104 billion staking layer for post-quantum cryptography.

The draft proposal, designated EIP-8394, was co-authored by Thomas Coratger and two other developers. Coratger, summarizing a talk by Stanford cryptographer Dan Boneh, wrote that Bitcoin and Ethereum are "heavily leaning" toward hash-based signatures, which rest only on assumptions the networks already trust.

The current deposit contract hardcodes BLS12-381 parameters, fixing public keys at 48 bytes and signature metadata at 96 bytes. The replacement accepts keys and credential metadata up to 8,192 bytes each and requires every deposit to declare its "credential scheme." The contract runs in three modes — disabled, BLS enabled, and BLS retired — and once a system call moves it to retirement, no later call can re-enable BLS onboarding.

The Ethereum Foundation has set approximately 2029 as the target for completing protocol-level quantum security changes. Google Quantum AI estimated that roughly 1,200 logical qubits could break 256-bit elliptic-curve cryptography, and a May report from quantum security firm Project Eleven put the odds of a machine capable of breaking elliptic-curve signatures at better than even by 2033.

What EIP-8394 changes

The proposal targets a constraint hiding in the existing contract: it hardcodes the dimensions of BLS12-381, fixing public keys at 48 bytes and signature metadata at 96. Post-quantum schemes need considerably more room, and the current contract has none to give. The replacement accepts keys and credential metadata of up to 8,192 bytes each, and asks every deposit to declare which "credential scheme" it uses. Scheme zero means BLS. The proposal assigns no others, leaving a future EIP to define what a post-quantum validator key actually looks like.

Post-quantum signature schemes like CRYSTALS-Dilithium or SPHINCS+ produce keys and signatures significantly larger than current BLS equivalents, which is why the redesigned contract needs to accommodate variable-length keys. The proposal carries deposit data to the consensus layer and leaves the cryptography to be specified later. It would need a coordinated fork across both layers to take effect. The pull request is labeled a draft awaiting review from the EIP editors, with its contract address, deployment code, and both activation timestamps marked as undecided.

Quantum threat timeline

Google Quantum AI's analysis, published in March, documented five distinct quantum attack scenarios targeting Ethereum's infrastructure and calculated that more than $100 billion in digital assets could face exposure, encompassing user wallets, staking mechanisms, smart contract platforms, and layer-2 scaling solutions. The estimated "Q-Day" — the point at which quantum systems could realistically break ECDSA and related schemes — ranges between 2028 and 2035.

More than 65 percent of all ETH sits in addresses whose public keys are already exposed onchain, according to Project Eleven's analysis. The proposal complements EIP-8141, or Frame Transactions, which is being considered for Ethereum's Hegotá upgrade later this year. That proposal would allow regular Ethereum accounts to change the cryptography used to authorize transactions without requiring users to move assets to new addresses.

The implications extend beyond the deposit contract itself. Restaking protocols built on top of Ethereum's staking layer face compounding exposure — EigenCloud currently reports a total value locked of approximately $4.592 billion in Ethereum-based assets. If the base-layer cryptography were compromised, restaking derivatives would face cascading failures.

Ethereum isn't alone in facing this challenge, but it's the first major proof-of-stake network to propose concrete changes at the deposit contract level. Bitcoin's UTXO model and different signature usage present a distinct set of quantum risks. Other proof-of-stake chains using similar elliptic-curve schemes face the same fundamental vulnerability but haven't yet published comparable proposals.

On August 26, Ether was exchanging hands at approximately $2,475.

This article is for informational purposes only and does not constitute investment advice.