Ethereum to Switch to Post-Quantum Security by Late 2029 as Developers Prepare for Q-Day

The Ethereum Foundation has unveiled an updated protocol roadmap, setting a hard deadline to safeguard the ecosystem against quantum supercomputers. The network’s base layer (L1) is slated to fully transition to post-quantum cryptographic algorithms across the execution, consensus, and data availability layers by December 2029.

The Q-Day Hypothesis and Google’s New Estimates

The target deadline stems from a highly cautious approach: developers are planning around a working scenario in which “Q-Day”—the advent of a quantum computer capable of breaking classical asymmetric cryptography—could theoretically occur as early as around 2030. While experts acknowledge that most forecasts give physicists more time, overhauling a decentralized network of this scale will take several years of groundwork.

User funds remain secure for now, as existing quantum processors lack the power to compromise network addresses.

Research from the Google Quantum AI lab served as a catalyst for accelerating the timeline. Researchers found that solving the discrete logarithm problem on the 256-bit secp256k1 curve might require around 1,200 logical qubits and 90 million Toffoli gates—substantially lower than prior theoretical estimates.

Several fundamental network components will face quantum threats in the future:

• User transaction signatures based on the ECDSA standard;
• Validator signatures using the BLS12-381 scheme;
• Cryptographic KZG commitments for block verification and zero-knowledge proofs (ZK-SNARKs).

The Hegotá Hard Fork and Programmable Signatures

The first steps of this restructuring will roll out with the upcoming Hegotá upgrade. According to the Ethereum Foundation blog, the EIP-8141 Frame Transactions standard has been assigned top priority. It introduces native account abstraction and makes signature verification programmatically customizable, allowing smart wallets to switch to quantum-resistant keys without requiring network-wide hard forks for every new algorithm.

The dedicated Post-Quantum Security team is already testing leanXMSS hash-based signatures and the leanVM environment, adapting them for execution clients.

Rolling out post-quantum protection will require developing several upgrades in parallel. According to The Block, developers will assemble an expert panel of leading cryptographers in January 2027 to assess real-world quantum computing progress and adjust the upgrade schedule if needed.