Ethereum is pushing post-quantum security and privacy higher on its long-term development agenda while researchers increasingly use artificial intelligence to strengthen software verification. The direction is reflected in Ethereum’s evolving Strawmap and dedicated security programs, where cryptographic resilience is becoming a design constraint alongside scalability, usability and decentralization. The Strawmap remains a draft planning tool rather than an official or binding protocol roadmap.
For validators, custodians and wallet developers, the implications extend well beyond one future hard fork. Ethereum currently depends on quantum-vulnerable primitives across account authentication, validator signatures, KZG commitments and some zero-knowledge systems. Preparing for quantum computing could eventually change how users authorize transactions, validators attest and the network verifies data. No existing quantum computer can currently break Ethereum’s production cryptography.
Ethereum Builds a Multi-Year Post-Quantum Migration
The Ethereum Foundation formed a dedicated Post-Quantum Security team in January 2026 and now runs recurring interoperability work involving more than 10 client teams. Its Lean Ethereum research includes leanXMSS, a hash-based replacement candidate for validator BLS signatures, and leanVM, a minimal zkVM intended to aggregate much larger post-quantum signatures efficiently. The challenge is not simply finding quantum-resistant cryptography, but preserving Ethereum’s consensus efficiency after replacing BLS aggregation.
I updated my 2023 roadmap diagram to overlay where the items that were there sit in the current Strawmap ( https://t.co/9deLIQWG24 ).
In general, a lot of overlap, but:
* Some things got reshuffled in order (eg. quantum safety up-prioritized)
* Some things deprioritized (eg.… pic.twitter.com/XLdIt4kAgT— vitalik.eth (@VitalikButerin) August 10, 2026
The migration also covers KZG commitments and application-layer proofs. Ethereum’s roadmap identifies STARK-based systems as one path because they rely on hash functions rather than the elliptic-curve constructions vulnerable to Shor’s algorithm. For user accounts, account-abstraction work is intended to provide greater signature flexibility. Ethereum is pursuing an incremental migration rather than requiring every wallet and validator to switch cryptography simultaneously.
Externally owned accounts present a particular custody issue because Ethereum signatures allow others to recover the signer’s public key. Ethereum’s quantum-security guidance therefore treats accounts that have already transacted as having exposed public keys that could eventually become targets for a sufficiently capable quantum computer. The immediate institutional priority is crypto-agility and inventory, not emergency movement of ETH.
Ethereum currently targets completion of core post-quantum infrastructure around 2029, including key registration, native PQ signature verification, quantum-resistant consensus and safer blob commitments. The Foundation explicitly describes these as planning milestones rather than commitments, with broader ecosystem migration expected to continue afterward. 2029 is therefore a development target, not a guaranteed deadline for an entirely quantum-safe Ethereum.
AI and Privacy Add Another Security Layer
AI is entering Ethereum security through a different route. The Foundation’s Protocol Security team is already running coordinated AI agents against protocol code, cryptographic software and smart contracts. The agents have found genuine bugs, but the team emphasizes independent reproduction and validation because many machine-generated findings are false or misleading. AI is being treated as a high-scale security search tool rather than an oracle capable of replacing human verification.
Formal verification is also gaining traction. Vitalik Buterin has described growing use of Lean and machine-checkable mathematical proofs, arguing that recent AI advances can reduce some of the labor traditionally required to create them. The emerging model combines AI-generated assistance with deterministic proof systems that can independently check whether software satisfies defined properties.
Privacy forms a parallel component of the roadmap. Ethereum researchers are working on private transactions, client-side proving, shielded systems and privacy-preserving identity, with several proposals under consideration for Hegotá. The objective is to make privacy increasingly structural rather than dependent on pseudonymity alone, particularly as modern analytics and AI make correlations across public data easier.
The three tracks ultimately converge around resilience. Quantum research addresses future cryptographic failure, privacy limits what public information adversaries can exploit, and AI-assisted verification seeks to discover implementation weaknesses faster. Ethereum’s long-term security strategy is increasingly about remaining verifiable and upgradeable as both computational attacks and defensive tools become substantially more powerful.
