Ethereum Protocol Cluster Unveils Ambitious Post-Quantum Roadmap and HegotÃ¡ Hardfork Strategy

In May, the Ethereum Protocol cluster welcomed a trio of new cluster coordinators, marking a period of strategic realignment and future planning. Following months of internal calibration and ecosystem-wide consultations, the cluster has now articulated its core priorities, commitments governing its work through 2029, and the specific requirements for upcoming protocol upgrades, most notably the…

by

September 15, 2026

10 minutes

Read Time

In May, the Ethereum Protocol cluster welcomed a trio of new cluster coordinators, marking a period of strategic realignment and future planning. Following months of internal calibration and ecosystem-wide consultations, the cluster has now articulated its core priorities, commitments governing its work through 2029, and the specific requirements for upcoming protocol upgrades, most notably the HegotÃ¡ hardfork. This comprehensive strategy aims to fortify Ethereum against emerging quantum computing threats and enhance its fundamental capabilities.

The North Star: Achieving Quantum Resistance by 2029

The overarching objective of the Ethereum Foundation’s (EF) Protocol cluster is to render Ethereum’s Layer 1 (L1) quantum-resistant across its execution, consensus, and data layers by December 2029. This ambitious deadline aligns with independent migration targets set by major technology players such as Google, Cloudflare, and Microsoft, underscoring a shared industry recognition of the impending threat posed by quantum computing. While the exact timeline for "Q-day"—the theoretical point at which quantum computers could break current cryptographic standards—remains uncertain, the Protocol cluster has adopted a deliberately aggressive assumption, planning for Q-day as early as 2030. This proactive stance is seen as strategically responsible, sending a clear signal of Ethereum’s long-term commitment to its ecosystem and users.

"Shipping post-quantum readiness early is the secure thing to do. It is the strategically responsible thing to do. It is the clearest signal we can send that Ethereum intends to exist 50, 100, and 1,000 years from now," stated a spokesperson for the EF Protocol cluster. This self-imposed deadline will remain non-negotiable until at least January 2027, when a reassessment will be conducted with input from external quantum computing experts. This commitment reflects a deliberate bet on proactive security measures, acknowledging that Q-day’s arrival cannot be precisely predicted.

The Strategic Plan: A Phased Approach to Quantum Readiness

The roadmap leading to full post-quantum readiness involves a series of interconnected hardforks, meticulously scheduled to ensure timely delivery. The cluster anticipates that client teams can realistically commence HegotÃ¡ implementation in late Q4 2026. Following the timeline outlined in the July Strawmap, full post-quantum readiness is slated for L, five hardforks after the Glamsterdam upgrade. Achieving this necessitates an aggressive cadence of approximately 7.2 months per fork, assuming Glamsterdam ships in December 2026 and L in December 2029. This schedule leaves minimal room for delays, emphasizing the need for efficient development and rigorous testing.

A critical contingency has been introduced with the August 19 Strawmap update, which designates a minimum viable post-quantum (MV-PQ) L1 milestone at J. This milestone includes the post-quantum public-key registry (I) and essential quantum-resistant components such as the consensus layer heartbeat, leanDA sampling on the data layer, and leanSPHINCS transactions on the execution layer (J*). This tiered approach allows for a more flexible delivery, with a 12-month cadence from Glamsterdam capable of reaching this crucial MV-PQ milestone by December 2029.

MV-PQ is conceived as a temporary safeguard, enabling Ethereum to continue operating through Q-day with reduced, but still functional, guarantees. The precise nature of these reduced guarantees is still under definition by researchers, but the ultimate goal of full resistance across all layers remains firm for the December 2029 target. Significant work remains, including the development of post-quantum attestations essential for complete economic finality within the consensus design.

The ordering of forks beyond J is subject to potential adjustments, with a review underway to swap K and L. This reordering could advance lean consensus to K and push mandatory execution proofs back to L*, aiming to deliver the consensus layer’s critical post-quantum components sooner. Regardless of the exact sequencing, the overarching strategy emphasizes parallel delivery and tight coordination across the entire Ethereum ecosystem. This intensive effort will require unprecedented teamwork, extending beyond the Protocol cluster to engage client teams, grant recipients, academic institutions, and the broader community to accelerate the pipeline from research to mainnet deployment.

The Five Pillars of Protocol Development: Multi-Fork Research Arcs

To manage its diverse and interconnected development efforts, the Protocol cluster has organized its work into five key multi-fork research arcs: fast finality, post-quantum cryptography, privacy enhancements, state management, and the development of a zero-knowledge Ethereum Virtual Machine (zkEVM).

Fast Finality: This arc aims to drastically reduce Ethereum’s time to finality from minutes to seconds. The current direction involves decoupling finality from block production and rebuilding the consensus layer around an "available chain" and a dedicated "finality gadget." Specifications and prototypes are actively being developed, with decoupled consensus positioned as a lead candidate for the I* hardfork.
Post-Quantum Cryptography: As detailed in the strategic plan, this arc is central to meeting the December 2029 quantum resistance deadline. It spans all three layers of Ethereum. The execution layer will leverage cryptographic agility, allowing signature schemes to be swapped without hard forks through native account abstraction. The consensus layer, however, requires a more robust approach, with cryptography and aggregation schemes undergoing rigorous testing and hardening before deployment via hard forks.
Privacy: The privacy arc is dedicated to establishing privacy as a core protocol guarantee, enabling users to transact, hold balances, and interact with applications without revealing sensitive financial history or relying on third-party trust. Initial efforts focus on delivering native, trustless, and censorship-resistant private transactions on Ethereum L1 within the HegotÃ¡ fork. Subsequent work will address post-quantum privacy at scale and encrypted mempools to shield transaction details until they are confirmed.
State Management: This arc tackles the critical challenge of preventing state growth and access from becoming a bottleneck for Ethereum. Key initiatives include migrating to a new trie structure, ensuring sustainable state growth, and enabling decentralized access to both current and historical state data. The most significant design and migration work is anticipated to commence with the I* hardfork and continue thereafter.
zkEVM: The zkEVM arc is progressing towards making execution proofs mandatory for validators, shifting from an optional feature to an expected protocol component. This evolution means validators will eventually verify succinct proofs rather than re-executing every block. Under the current Strawmap, mandatory proofs are slated for K. A potential reordering of forks is being considered, which could advance post-quantum attestations to K while moving mandatory proofs back to L*. This arc also drives advancements in formal verification tooling, workflows, and verified cryptographic components that will benefit other research arcs, particularly post-quantum initiatives.

Setting and Shipping Priorities: A Rigorous Framework

The EF Protocol cluster’s guiding principle, reiterated from a July update, is to "Concentrate Protocol on what only Protocol can do and will do, and complete the Strawmap items that allow Ethereum to uphold the Mandate." The completion of Glamsterdam and the commitment to December 2029 have elevated post-quantum work from a long-term research concern to an immediate delivery priority. This shift is reflected in the post-Glamsterdam priority ladder, which also designates formal verification across the remaining research arcs as a cross-cutting tooling initiative.

The priority ladder outlines a clear hierarchy:

P0: Keep mainnet safe (Unchanged)
P1: Ship the critical components of HegotÃ¡, I, and J: the path to MV-PQ (Shifted from shipping Glamsterdam and HegotÃ¡ without issues)
P2: Hold research and engineering capacity for K and L, focused on accelerating the remaining PQ items (Shifted from holding capacity for the fork after next)
P3: Hold research capability for the four remaining arcs (fast finality, privacy, state, and zkEVM), with formal verification as cross-cutting tooling that advances all of them (Shifted from the five multi-year arcs)

Work earns inclusion through a defined maturity pipeline: Research → EIP → Prototype → Devnet → PFI → CFI → SFI → Mainnet. Each stage is designed to progressively add evidence, reduce uncertainty, and establish clear ownership before the next commitment is made. Importantly, a devnet can trigger a return to the research phase, and PFI, CFI, and SFI are indicators of confidence among AllCoreDevs, not substitutes for tangible implementation evidence.

HegotÃ¡: The Crucial First Test

The HegotÃ¡ hardfork is positioned not as the definitive post-quantum upgrade, but as the critical fork that determines whether subsequent quantum-resistant upgrades can be delivered on schedule. Its primary, SFI’d headliners are EIP-7805, Fork-choice enforced Inclusion Lists (FOCIL) for the consensus layer, and EIP-8141, Frame Transaction, for the execution layer. The safe co-delivery of these two EIPs, along with thorough testing of their interaction, constitutes the core engineering lift for HegotÃ¡.

There is a notably low appetite for additional scope on the consensus layer, beyond FOCIL, unless it directly contributes to post-quantum readiness. This conserves vital research and client development resources needed for specifying and prototyping decoupled consensus and preparing for subsequent upgrades.

Preserving CROPS: A Commitment to Core Guarantees

The Protocol cluster’s work is guided by the EF Mandate, which emphasizes Censorship Resistance (CR), Open Source and Free (O), Privacy (P), and Security (S)—collectively known as CROPS. Open-source development and participation remain the bedrock of all fork activities. HegotÃ¡ makes specific, tangible commitments across censorship resistance, privacy, and security.

Censorship Resistance (CR): FOCIL aims to bolster transaction inclusion guarantees by empowering multiple validators to impose constraints on block builders. This is achieved by specifying mandatory inclusion lists (ILs) for transactions, which attesters must verify for a block to be considered valid. EIP-8369, VOPS Profiles for FOCIL Eligibility, defines eligible transactions and validator verification requirements, ensuring FOCIL’s guarantees extend to future transaction types. These advancements represent HegotÃ¡’s direct contribution to resisting censorship and capture.
Privacy (P): Ethereum currently lacks fundamental protocol support for privacy applications. EIP-8250, Keyed Nonces, will enable multiple users to share a single sender address for enhanced anonymity while maintaining individual transaction nonces, preventing blocking. EIP-8272, Recent Roots, will allow private transactions to leverage recent on-chain state, making them verifiable by FOCIL and thus eligible for its inclusion guarantees. These two EIPs, shipping alongside Frames, are designed to remove significant barriers to trustless, censorship-resistant private activity on L1.
Security (S): Frame transactions introduce programmability at the protocol level for transaction validation, execution, and gas payment. This provides a native pathway for accounts to move away from vulnerable secp256k1 keys, supports signature aggregation, and facilitates the introduction of new signature schemes without requiring hard forks for each new scheme. It also ensures account validation and fee payment remain permissionless. Keyed nonces and recent roots complement the Frames core, essential for HegotÃ¡.

EIP-8365, BLS Withdrawal Credential Retirement, initiates the process of retiring withdrawal credentials tied to vulnerable cryptography, allowing this work to commence before the full post-quantum consensus design is finalized.

The Frames-extension package directly enhances account security. EIP-7906, Transaction Assertions via State Diff Opcode, allows transactions to verify specified effects before commitment, mitigating attacks like drainers. EIP-8298, SETCODEFROM Code Reuse Instruction, enables delegated accounts to function as full smart-contract accounts. EIP-8151, Account Code Restricted ecRecover, prevents legacy key authentication once an account possesses actual code. These last two EIPs form the account migration path for retiring secp256k1 as a primary key.

Furthermore, EIP-8279, Block Access List Byte Floor, and EIP-8131, Unified Transaction Content Floor, establish predictable gas floors for adversarial block construction, treating worst-case block building scenarios as a security concern. Any subsequent utilization of the resulting headroom will be addressed in separate scope decisions. The safe delivery of FOCIL and Frames, and rigorous testing of their interplay, are HegotÃ¡’s paramount engineering commitments, with any additional scope needing to meet a high bar of necessity.

Looking Ahead: The HegotÃ¡ EIP Opinion Post and Community Engagement

The companion post, "EF Protocol: The HegotÃ¡ EIP Opinion Post and Tier List," provides a detailed evaluation of every proposed EIP for the HegotÃ¡ hardfork, offering specific justifications for each grade. This document is essential reading for a comprehensive understanding of the fork’s scope and rationale.

To foster open dialogue and address community queries, the EF Protocol cluster will host a Reddit AMA (Ask Me Anything) on r/ethereum on September 16th at 2:00 PM UTC. Participants are encouraged to submit questions in advance via a dedicated form, with sharper inquiries expected to lead to more productive discussions. This initiative underscores the cluster’s commitment to transparency and collaborative development as it navigates the complex path toward a quantum-resistant and more capable Ethereum.