Ethereum developers have opened a new chapter in the network's post-quantum security efforts, presenting a draft proposal for a post-quantum-ready validator deposit contract. The plan, filed in the ethereum/EIPs repository by Kevaundray Wedderburn with Thomas Coratger and Tom Wambsgans listed as co-authors, would introduce variable-length public keys and credential metadata while creating an irreversible switch that permanently disables new BLS deposits. The move is designed to phase out the existing BLS signature scheme, which currently aggregates hundreds of thousands of validator signatures for consensus efficiency but is vulnerable to quantum computers running Shor's algorithm.
The proposed fix centers on leanXMSS, a hash-based signature scheme that replaces BLS's 96-byte signatures with roughly 3,000-byte signatures. Because the legacy deposit contract uses fixed-size fields, the proposal adds length-flexible contract mechanics to accommodate the larger quantum-safe keys. The draft, however, is still unfinished. Wedderburn noted that large portions remain boilerplate covering EIP-7685 mechanics and that the team still needs to blend the draft with existing validator EIPs 7251, 7002, and 8282. The Ethereum Foundation's bot currently lists the proposal as awaiting another editor review, with a request to reassign its placeholder number to 8394 before it can advance.
Quantum readiness has become a 2026 priority for the Ethereum Foundation. In January, the Foundation formed a dedicated post-quantum team, and Coratger, a co-author of the deposit-contract draft, is one of its leaders. The Foundation has also attached a $1 million Poseidon Prize to hardening a hash function, following an earlier $1 million Proximity Prize. Justin Drake described these efforts as a 'top strategic priority.' The urgency increased after a March 2026 Google Quantum AI document showed that the cost of breaking the 256-bit elliptic curve cryptography used by Ethereum could be reduced by about 20 times, even though quantum machines capable of such attacks do not yet exist.
Ethereum's broader post-quantum roadmap, outlined by Vitalik Buterin in February 2026, covers four areas: validator BLS signatures, KZG commitments behind data availability, ECDSA signatures that secure ordinary accounts, and zero-knowledge proof systems used by rollups. A separate proposal, EIP-8141, is under consideration for the Hegotá upgrade and is expected to address account-level protection through native account abstraction. For now, core Layer 1 quantum upgrades are targeted for around 2029, although that timeline is a planning goal and could still shift. If finalized, the deposit contract proposal could reinforce Ethereum's long-term security posture and may attract institutional interest focused on cryptographic resilience.
