The rapid advancement of quantum computing is posing serious challenges to current cryptographic systems, including blockchain. Against this backdrop, the Ethereum Foundation (EF) has officially established a dedicated Post-Quantum Security team and allocated millions of USD to fund research and the deployment of quantum-resistant protocols. This move is seen as a long-term strategic preparation to protect Ethereum from potential security risks that may emerge over the next 5–15 years.
Key Takeaways
- The Ethereum Foundation has officially formed a Post-Quantum Security team
- EF announced USD 2 million in funding for post-quantum cryptography research
- The focus is on quantum-resistant digital signatures to replace ECDSA
- Post-quantum solutions are not yet gas-efficient; cost remains a major challenge
- The claim of an “83% reduction in transaction fees” has not been officially verified
1. Ethereum Foundation and the Threat from Quantum Computers
How do quantum computers threaten blockchain?
Most current blockchains, including Ethereum, are built on public-key cryptography. Specifically, Ethereum relies on two main classes of cryptographic algorithms:
- ECDSA (Elliptic Curve Digital Signature Algorithm) → used to sign transactions and verify wallet ownership
- Keccak-256 (SHA-3) → used for hashing, generating wallet addresses, and ensuring data integrity
Among these, ECDSA is the weakest point when facing quantum computers.
Why can ECDSA be broken?
ECDSA is based on the:
- Discrete Logarithm Problem on elliptic curves
This problem is practically infeasible to solve within a reasonable time using classical computers. However, it can be efficiently solved by Shor’s algorithm when run on a sufficiently powerful quantum computer.
If a quantum computer achieves:
- A sufficient number of stable qubits
- A low enough error rate
- A long enough coherence time
→ Shor’s algorithm can:
- Derive the private key from the public key
- Completely break the ECDSA digital signature scheme
How dangerous is this for Ethereum?
On Ethereum:
- A wallet’s public key is revealed after its first transaction
If ECDSA is broken:
- An attacker can compute the private key
- Forge fraudulent transactions
- Take full control of the wallet
In other words:
Any Ethereum wallet that has ever made a transaction could be at risk of being stolen if ECDSA is compromised.
This is why post-quantum risk is not just theoretical—it represents a systemic security threat.
Are hash functions safe against quantum computers?
Unlike ECDSA, hash functions such as Keccak-256:
- Are not completely broken by Shor’s algorithm
- Are only indirectly affected by Grover’s algorithm
Grover’s algorithm:
- Reduces the effective security of a hash function from 256 bits to ~128 bits
However:
- 128-bit security is still considered safe for decades
- Output length can be increased to compensate
Therefore, hash functions are not an urgent threat, whereas digital signatures are.
When Will the Quantum Computing Risk Become Real?
Forecasts from academia and industry
According to research from academic institutions and major technology organizations, the development roadmap of quantum computing is often divided as follows:
In the next 5–10 years
Quantum computers may be powerful enough to:
- Experimentally break cryptography in laboratory environments
- Attack weak or poorly configured cryptographic systems
But they are not yet stable or powerful enough to attack large-scale blockchains.
In the next 10–15 years
There may emerge:
- Quantum computers powerful enough to practically attack ECDSA
This would pose a serious threat to long-running public blockchains, especially those that:
- Have long historical data
- Contain many “dormant” wallets holding large amounts of assets
The “Harvest Now, Decrypt Later” Risk
A lesser-known but critical threat is the strategy known as:
“Harvest now, decrypt later.”
Attackers can:
- Record the entire Ethereum transaction history
- Store exposed public keys
- Wait until quantum computers become powerful enough to break ECDSA
- Attack wallets that have not yet upgraded
This makes early preparation absolutely crucial.
Why Can’t Blockchains “Patch Security Retroactively”?
Unlike traditional systems:
- Blockchains are immutable
- Historical data cannot be deleted or modified
This leads to three major consequences:
- Old wallets permanently exist in history
- Exposed public keys cannot be “hidden again”
- Past data cannot be retroactively secured
Therefore:
Waiting until quantum computers become a real threat would be too late.
Blockchains must:
- Prepare early
- Have a clear roadmap for signature migration
- Ensure backward compatibility
This is exactly why the Ethereum Foundation treats post-quantum security as a long-term strategic issue, not just a routine technical upgrade.
2. Ethereum Foundation’s Post-Quantum Security Team
What has the Ethereum Foundation done to prepare for the post-quantum era?
Faced with the risk that quantum computers could break today’s cryptographic algorithms, the Ethereum Foundation (EF) has taken proactive, foundational steps, rather than waiting until the threat becomes urgent.
Specifically, the Ethereum Foundation has:
Established a Dedicated Post-Quantum Security Team
The Ethereum Foundation has officially created an independent Post-Quantum Security Team with responsibilities that include:
- Studying the impact of quantum computing on Ethereum
- Assessing the real-world risks of currently used cryptographic algorithms
- Designing a future roadmap for digital signature migration
The creation of a dedicated post-quantum team signals that:
- This is no longer a “far-off” concern
- It has become a protocol-level strategic security priority
Elevating Post-Quantum Security to a Core Strategic Priority
Unlike typical upgrades (EIPs focused on performance, UX, or gas fees), post-quantum security is classified by EF as an “existential risk”—a threat to Ethereum’s long-term survival.
This means:
- Post-quantum security is not just an optional feature
- It is a determining factor for Ethereum’s long-term viability
It can impact:
- User wallets
- Smart contracts
- Layer 1 infrastructure and the entire Layer 2 ecosystem
Workshops, Devnets, and Real-World Implementation Research
The Ethereum Foundation has not stopped at academic theory. The post-quantum team has:
- Organized technical workshops for developers
- Built experimental devnets for post-quantum signatures
- Tested new authentication models in near-production environments
Crucially, the goal is not to simply prove that post-quantum cryptography can work, but to evaluate whether Ethereum can realistically migrate in the future.
This evaluation includes:
- Backward compatibility
- Gas cost impact
- User experience
- Feasibility of gradual migration
What Does the USD 2 Million Funding Program Mean?
Funding Structure
The Ethereum Foundation announced a USD 2 million grant program, structured as:
- Two research awards
- Each award worth USD 1 million
These are not broad, generalized grants. Instead, they are tightly focused on:
- Concrete research outcomes
- Results with practical applicability to Ethereum
Collaboration Partners
The Ethereum Foundation is actively expanding collaboration with:
- Post-quantum cryptography startups
- Academic research groups
- Universities and cryptography research institutes
This approach allows Ethereum to:
- Avoid being locked into a single cryptographic paradigm
- Leverage rapid advances from academia
- Shorten the gap between research and real-world deployment
Research Focus of the Post-Quantum Security Team
Post-Quantum Digital Signatures
The Ethereum Foundation is concentrating on several classes of quantum-resistant signature algorithms, including:
Lattice-based signatures
- Highly regarded for security
- Leading candidates in NIST’s post-quantum standardization process
Hash-based signatures
- Very strong security guarantees
- Simple and easy to verify
- Limited by large signature sizes and restricted reuse
The goal is not to select the “best algorithm in theory,” but rather:
The algorithm best suited for a public blockchain environment, where every byte has a cost.
Gas Optimization — A Survival-Critical Problem
One of the biggest barriers to post-quantum adoption is:
- Larger signature sizes
- More complex verification
- Significantly higher gas costs compared to ECDSA
As a result, research strongly emphasizes:
- Reducing signature size
- Optimizing verification processes
- Leveraging precompiles
- Splitting on-chain and off-chain computation
The Ethereum Foundation clearly understands that:
If post-quantum security causes transaction fees to spike, network-wide deployment will not be viable.
Deployment Across Ethereum L1 and L2
A very pragmatic aspect of EF’s strategy is that it does not assume immediate, network-wide deployment on Layer 1.
Scenarios currently under investigation include:
- Experimental deployment on Layer 2 solutions
- Post-quantum wallets operating alongside ECDSA wallets
- Partial, non-disruptive migration without breaking the existing ecosystem
This approach helps to:
- Reduce systemic risk
- Allow users and developers to adapt gradually
- Avoid forced hard forks in the near term
3. Is Post-Quantum Cryptography Really Gas-Intensive?
One of the biggest objections to deploying post-quantum cryptography (PQC) on Ethereum is the claim that:
“Post-quantum algorithms are too heavy, too gas-expensive, and unsuitable for public blockchains.”
This concern is not unfounded—but it also does not fully reflect the current reality.
Why Is Post-Quantum Considered “Heavy”?
Direct comparison with ECDSA
ECDSA was designed:
- For classical computing environments
- With compact signatures
- Using relatively lightweight operations
In contrast, most post-quantum algorithms today:
- Are built to resist quantum attacks
- Trade performance for stronger security guarantees
Specifically, compared to ECDSA, post-quantum algorithms typically have:
Much larger signature sizes
- ECDSA: ~65 bytes
- Post-quantum signatures:
- Hundreds of bytes
- Sometimes several kilobytes, depending on the algorithm
In a blockchain environment:
- Every byte consumes gas
- Larger signatures → higher storage and processing costs
More complex verification operations
Post-quantum schemes often rely on:
- Lattice-based constructions
- Hash chains
- Large vectors and matrices
This results in:
- A higher number of operations
- Longer verification times
- High gas consumption if implemented directly in EVM bytecode
Exploding gas costs with “naive” implementations
If a post-quantum algorithm is:
- Implemented entirely in Solidity
- Without protocol-level support
→ Gas costs can become:
- Many times higher than ECDSA
- Impractical for everyday transactions
This is what historically fueled concerns that:
Post-quantum cryptography could multiply Ethereum transaction fees and undermine network usability.
What Does Current Research Actually Say?
Yes: post-quantum is still not optimized
Research and experiments consistently show that:
- Post-quantum cryptography cannot yet replace ECDSA immediately
- Poorly optimized implementations face major gas-cost barriers
However, this is not a final verdict—it is the starting point for optimization.
Optimization Paths Currently Being Explored
Signature compression
One key direction is:
- Reducing signature size
- Eliminating redundant data
- Designing signature structures better suited for blockchains
Signature compression can:
- Significantly reduce storage costs
- Lower per-transaction gas usage
- Improve scalability
Protocol-level precompiles
Instead of:
- Performing all cryptographic operations inside the EVM
Researchers are proposing:
- Precompiled contracts for post-quantum signatures
- Executing heavy computations at a lower, VM-adjacent level
This approach:
- Mirrors how Ethereum handles elliptic curve operations today
- Can reduce gas costs by orders of magnitude compared to pure Solidity implementations
Off-chain verification optimization
Another important approach is:
- Avoiding full signature verification on L1
By splitting:
- Complex verification → off-chain or on L2
- Verification results → submitted on-chain
This is especially well suited for:
- Layer 2 solutions
- Rollups
- Account abstraction
This strategy helps to:
- Reduce load on Ethereum L1
- Keep transaction fees within acceptable bounds
- Enable phased post-quantum deployment
About the “83% Transaction Fee Reduction” Claim
This figure requires particular caution.
At present:
- There is no official documentation from the Ethereum Foundation confirming that post-quantum cryptography has:
- Reduced transaction fees by 83% compared to current Ethereum
This number most likely comes from:
- Comparisons between different post-quantum algorithm variants
- Internal tests or devnet experiments
- Improvements over early post-quantum implementations, not over ECDSA
Therefore:
- Quoting an “83% fee reduction” without proper context
- Can be misleading for:
- Investors
- Non-technical users
- News readers
In serious analysis, this figure should be treated as:
A sign of technical progress—not as a proven economic advantage.
4. The Strategic Significance of Post-Quantum Security for Ethereum
The Ethereum Foundation’s proactive preparation for the post-quantum era is not about short-term publicity—it is about laying the groundwork for Ethereum’s survival over the coming decades. This is a strategic infrastructure decision, comparable to how the Internet began preparing for IPv6 long before it became a necessity.
Long-Term Advantages of Early Post-Quantum Preparation
Avoiding emergency hard forks in the future
One of the greatest risks for public blockchains is:
- Being forced to upgrade security under emergency conditions
If Ethereum were to wait until:
- Quantum computers become strong enough to break ECDSA
- Real-world attacks begin to appear
→ the network could face:
- Rushed hard forks
- Community fragmentation
- Security risks during a chaotic transition
Early post-quantum preparation allows Ethereum to:
- Design a long-term upgrade roadmap
- Test multiple approaches in parallel
- Execute gradual, non-disruptive migrations
This helps Ethereum avoid the dangerous scenario of “panic patching”—especially risky for an open financial system.
Maintaining trust with institutions and governments
Large institutions and governments:
- Operate on long investment cycles
- Require high security standards
- Care about risks over 10–30 year horizons
By publicly articulating its post-quantum strategy, Ethereum sends a clear signal:
- Ethereum is not only secure today
- It is being designed to remain secure in the quantum era
This is particularly critical for:
- Tokenized assets
- Institutional-grade DeFi infrastructure
- Public-sector blockchain applications
Preserving Ethereum’s position as long-term blockchain infrastructure
Not every blockchain will exist long enough to:
- Confront the post-quantum era
- Require cryptographic upgrades at the protocol level
Ethereum’s early preparation demonstrates that:
- Ethereum is positioned as long-term infrastructure, not a short-lived product
- Its ecosystem is built with a 30–50 year mindset, not just a few bull–bear cycles
This helps Ethereum:
- Reinforce its role as a global settlement layer
- Maintain an edge over blockchains focused solely on short-term performance
Implications for Ethereum Investors
Short-term impact: negligible
In the short term, post-quantum initiatives:
- Do not change current transaction mechanics
- Do not affect user experience
- Do not directly impact:
- Gas fees
- Throughput
- Transaction speed
As a result:
- ETH price does not react immediately
- Post-quantum security is not a short-term price catalyst
This explains why:
News about post-quantum efforts often fails to move prices, despite their major strategic importance.
Long-term impact: strengthening ETH’s fundamental value
Over the long term, post-quantum preparation helps:
- Reduce systemic risk
- Increase trust in Ethereum as financial infrastructure
- Protect assets and data for decades
For long-term investors, this represents:
- A downside risk reducer
- Not a growth narrative, but future-proofing insurance for the network
Attracting institutions with national-grade security requirements
Large institutions, pension funds, and central banks:
- Look beyond yields
- Focus on long-term viability and technological risk
A blockchain:
- Without a post-quantum strategy
- May be excluded from institutional consideration
In contrast, Ethereum is building an image as infrastructure that:
- Aligns with future cryptographic standards
- Meets national-level security requirements
- Has a clear and credible upgrade roadmap
This creates strong advantages in areas such as:
- Tokenized bonds and equities
- CBDCs and national payment systems
- Public data infrastructure
The Big-Picture Strategic View
Post-quantum security is not:
- A “new feature”
- A UX improvement
- Or a short-term price driver
It is:
A strategic decision to ensure Ethereum’s continued existence and growth in the post-quantum era.
Blockchains that fail to prepare early may:
- Be forced into chaotic upgrades
- Gradually lose trust as quantum threats become real
Ethereum has chosen the harder path:
- Preparing early
- Moving slowly but deliberately
- Laying the foundation for the next several decades
FAQ – Frequently Asked Questions
Is Ethereum currently safe against quantum computers?
Yes, in the short and medium term. The risk lies in the long-term future.
When will Ethereum transition to post-quantum cryptography?
There is no official timeline yet. Ethereum is currently in the research and preparation phase.
Do users need to do anything right now?
No. Any future transition (if it happens) will be handled at the protocol level.
Conclusion
The Ethereum Foundation is not reacting late—it is moving at least a decade ahead of the risk. The establishment of a dedicated Post-Quantum Security Team and the allocation of USD 2 million in funding demonstrate that Ethereum views post-quantum cryptography as a matter of survival, not a marketing trend.
That said, the community must clearly distinguish between research, experimentation, and real-world deployment, and avoid amplifying figures that have not been officially verified.
Disclaimer: The information provided here is for informational purposes only and should not be considered financial, investment, legal, or professional advice. Always conduct your own research, consider your financial situation, and, if necessary, consult with a licensed professional before making any decisions.