After years of racing to prove blocks in under 10 seconds, the Ethereum Foundation has set a new technical roadmap prioritizing security over speed for zero-knowledge Ethereum Virtual Machines (zkEVMs), establishing three critical milestones stretching through the end of 2026. The shift is dramatic: the Ethereum Foundation is shifting focus from performance to security, setting a target of 128-bit provable security for L1 zkEVMs by the end of 2026.
The timing couldn’t be more critical. The shift comes after zkEVM teams successfully reduced proving times from 16 minutes to 16 seconds while cutting costs by 45 times, with 99% of Ethereum blocks now provable in under 10 seconds on target hardware. Yet despite these performance breakthroughs, the foundation warned that security remains “the elephant in the room,” with many STARK-based zkEVMs relying on unproven mathematical conjectures that recent research has begun to disprove.
The message is clear: speed means nothing if attackers can forge proofs and drain billions from Layer-2 protocols. With Ethereum currently trading at $2,974 and a market cap of $359 billion, the foundation is betting institutional adoption depends on cryptographic guarantees—not transaction throughput.
The Security Crisis: Why 128-Bit Matters
The Existential Threat:
“If an attacker can forge a proof, they can forge anything: mint tokens from nothing, rewrite state, steal funds,” the foundation stated in a December 18 post. This isn’t theoretical—current zkEVM designs contain mathematical assumptions that haven’t been fully validated and that recent cryptographic research has challenged.
What 128-Bit Security Means:
At its core, 128-bit security refers to the strength of cryptographic primitives, like hash functions and signatures, measured by the number of operations (2^128) an attacker would need to crack them. It’s the gold standard in cybersecurity—think of it as a digital fortress impervious to brute-force attacks with today’s supercomputers.
Current State: Dangerously Weak:
Many Layer-2 scaling solutions built on zkEVM technology operate below 100-bit security—vulnerable to sophisticated attacks as computational power advances. To address this, the Ethereum Foundation has mandated 128-bit provable security as the minimum acceptable standard for any zkEVM intended for Ethereum mainnet, in line with recommendations from leading cryptographic standardisation bodies.
The Three-Phase Roadmap: 2026 Milestones
A three-stage roadmap was outlined, requiring zkEVM teams to use official tools and meet incremental security thresholds. Each phase builds toward the final 128-bit mandate:
Phase 1: Unified Security Assessment (By February 2026)
The first milestone requires zkEVM teams to integrate their proof system components with soundcalc, a newly created security estimation tool, by the end of February 2026. This standardized measurement framework will replace inconsistent self-reported security claims with objective, verifiable metrics.
What soundcalc Does:
- Measures concrete security levels of proof systems
- Analyzes cryptographic assumptions in STARK-based designs
- Provides comparative benchmarks across zkEVM implementations
- Exposes vulnerabilities before mainnet deployment
Phase 2: 100-Bit Minimum + Proof Size Limits (By May 2026)
By May 2026, teams must achieve 100-bit provable security with final proof sizes under 600 kilobytes while providing compact descriptions of their recursion architecture. This intermediate milestone forces zkEVM developers to balance security with practical constraints.
Technical Requirements:
- At least 100-bit provable security (interim target)
- Final proof sizes below 600 kilobytes
- Clear recursion architecture documentation
- Security audit frameworks in place
Phase 3: Full 128-Bit + Formal Verification (By December 2026)
The final milestone, set for the end of 2026, requires full 128-bit provable security, proof sizes capped at 300 kilobytes, and formal arguments for the soundness of recursive proof composition. Only zkEVMs meeting these standards will be considered mainnet-ready.
Final Standards:
- 128-bit provable security (non-negotiable)
- Proof sizes under 300 kilobytes
- Formal soundness arguments for recursion
- Complete cryptographic security audits
Why Now? The Strategic Timing
Vitalik’s Vision:
Vitalik Buterin, co-founder, has consistently championed this focus, favoring security and correctness over speed. His position: “Rollups must be secure and censorship-resistant first, and performance optimizations should not come from weakening cryptographic assumptions.”
The Architecture Stabilization Window:
George Kadianakis from the EF cryptography team emphasized the strategic timing of securing zkEVM architectures before they become moving targets. “Once teams have hit these targets and zkVM architectures stabilize, the formal verification work we’ve been investing in can reach its full potential,” he wrote.
The foundation recognizes a narrow window: stabilize security standards now while zkEVM designs are still flexible, or face years of retrofitting patches onto fragile foundations as billions in TVL accumulate.
Institutional Adoption Prerequisite:
As the call for enhanced security in crypto grows louder, Ethereum’s proactive stance is set to redefine what security means in a rapidly evolving digital ecosystem. Banks, asset managers, and enterprises won’t deploy on Layer-2s with sub-100-bit security—128-bit becomes table stakes for TradFi integration.
Impact on Major Layer-2 Projects
Who’s Affected:
Every zkEVM-based Layer-2 must comply:
- Polygon zkEVM: Must upgrade proof systems
- zkSync Era: Faces architecture review
- Scroll: Needs recursion soundness verification
- StarkNet: STARK assumptions under scrutiny
- Linea: ConsenSys-backed, must meet May milestones
The Performance Trade-Off:
The transition could slow some projects, but it underscores the long-term credibility required to attract institutions and high-value applications. Teams that previously optimized for speed may see proving times increase as cryptographic hardening adds computational overhead.
Winners and Losers:
- Winners: Well-funded teams with strong cryptography talent (Polygon, zkSync, StarkWare)
- Losers: Smaller zkEVMs lacking resources for formal verification
- Question Marks: New entrants launching in 2025-2026 must design to 128-bit from day one
Market Implications: ETH Price and Ecosystem
Current Ethereum Status:
Ethereum (ETH), currently priced at $2,974.48, holds a market cap of $359.00 billion, marking a 12.04% dominance. Notably, its 24-hour trading volume dropped by 65.50%, while recent price movements show a 6.09% rise over 30 days but a 30.60% decline over 90 days.
Short-Term Bearish Factors:
- Development slowdowns as teams implement security upgrades
- Potential delays for upcoming Layer-2 launches
- Uncertainty around which projects can meet milestones
Long-Term Bullish Case:
- 128-bit standard removes institutional adoption blocker
- Formal verification attracts TradFi capital
- Security credibility advantage vs. Solana, other L1s
- Foundation for tokenized assets, RWAs, enterprise DeFi
Expert Predictions:
The Coincu research team anticipates significant regulatory and technological shifts. Experts see this move bolstering Ethereum’s appeal to institutions and enhancing the framework for integrating secure DeFi applications.
Challenges Ahead: Can All zkEVMs Comply?
Technical Complexity:
Implementing formal verification for recursive proof systems is extraordinarily difficult. Many zkEVM teams lack in-house cryptographers capable of proving 128-bit security guarantees. The May 2026 deadline for 100-bit security is aggressive—only 5 months away.
Resource Constraints:
Smaller Layer-2 projects may lack funding for expensive security audits and formal verification infrastructure. Expect consolidation: weaker zkEVMs acquired by stronger players or shutting down entirely.
Moving Target Problem:
While zkEVM has yielded performance gains, several approaches depend on assumptions that lack full external validation, presenting an on-chain forgery risk. As cryptographic research advances, assumptions considered “safe” today may be challenged tomorrow.
User Experience Trade-Offs:
The foundation acknowledged these challenges in its roadmap, describing Ethereum as “too complex” for most users while outlining plans for smart contract wallets that simplify gas fees and key management. Security hardening may increase gas costs and latency.
What This Means for Investors and Users
For ETH Holders:
Long-term bullish signal. Institutions won’t deploy billions on insecure infrastructure. 128-bit standard positions Ethereum as the only L1 with formally verified, mainnet-grade Layer-2 ecosystem. Price catalysts emerge in 2026-2027 as TradFi adoption accelerates.
For Layer-2 Token Holders:
High risk. Projects unable to meet May 2026 milestones face existential threat. ARB, OP, MATIC likely comply successfully. Smaller L2 tokens (LINEA, SCROLL, etc.) face consolidation risk. Avoid low-market-cap zkEVMs until compliance confirmed.
For DeFi Users:
Short-term: expect higher gas fees and slower finality as zkEVMs implement security upgrades. Long-term: massively improved safety for funds locked in L2 protocols. Risk of smart contract exploits due to weak cryptography decreases dramatically.
For Developers:
If building on zkEVMs, prioritize projects with clear paths to 128-bit compliance. Avoid launching dApps on unproven Layer-2s that may fail security milestones. Base (Coinbase), Arbitrum, Optimism safest near-term bets.
Conclusion: Security-First Era Begins
Ethereum’s 128-bit security mandate marks the end of the “move fast and break things” era for Layer-2 scaling. The Ethereum Foundation is prioritizing security over speed, aiming for 128-bit provable security by the end of 2026. The three-phase roadmap—soundcalc integration by February, 100-bit by May, 128-bit by December—forces every zkEVM to choose: comply or become irrelevant.
The short-term impact? Development slowdowns, potential project failures, and market uncertainty. The long-term result? Ethereum becomes the only blockchain ecosystem where institutions can deploy billions with cryptographic confidence that funds cannot be forged, stolen, or rewritten by proof manipulation.
For a network managing $359 billion in market cap and aspiring to become global settlement infrastructure, the choice is obvious. Speed is worthless if the system isn’t secure. Ethereum just chose survival over hype—and that’s the most bullish signal of all.
Disclaimer: This content is for educational and reference purposes only and does not constitute any investment advice. Digital asset investments carry high risk. Please evaluate carefully and assume full responsibility for your own decisions.
Join MEXC and Get up to $10,000 Bonus!
Sign Up
