Ethereum (ETH) Developers Propose Quantum-Proof Deposit Contract With 8,192-Byte Keys

Deposit Contract Rewrite Opens Post-Quantum Path

Ethereum, the largest altcoin by market value, is moving to future-proof its staking layer against quantum computing. Developers submitted a draft proposal on Monday to rebuild the network's validator deposit contract — the gateway through which users lock ether to qualify as validators. The existing code pins the BLS12-381 key format, holding public keys to 48 bytes and signature metadata to 96 bytes, which leaves no headroom for the larger keys that post-quantum schemes require. Under the new design, each deposit could carry keys or credential metadata as large as 8,192 bytes and would have to label the cryptographic scheme it uses, with zero reserved for BLS; what a post-quantum key will look like is left for future EIPs to specify. The proposed contract carries three operational states — disabled, BLS enabled, and BLS retired — and the authors note that once a system call shifts it into retirement, no subsequent call can switch BLS onboarding back on. The pull request remains a draft and is still awaiting EIP editor review; its contract address, deployment code and both activation timestamps are still marked undecided. One of the three authors, Thomas Coratger, spent the same day walking through Stanford cryptographer Dan Boneh's analysis of the post-quantum landscape, noting in a Twitter thread that NIST-standardized stateless hash-based signatures run to roughly 8KB each, lining up with the ceiling the new contract imposes, while their compact counterparts expose a signer's private key if a counter is ever reused. 'Post-quantum cryptography isn't a simple upgrade,' Coratger wrote. The Ethereum Foundation stood up a dedicated team in the past year to plan the transition to post-quantum cryptography. A May report from quantum-security firm Project Eleven estimated the chance of a machine that can break elliptic-curve signatures at better than even by 2033, with 2030 a possibility, and found that a majority of ETH supply — over 65% — is held in wallets whose public keys are already visible onchain.

Roughly 42.4 million ETH — worth about $104 billion as of Wednesday — is staked on the network, with every validator's keys using the BLS format the draft would eventually retire. The scheme's appeal is aggregation — it compresses hundreds of thousands of signatures into a single one, and that compression is what keeps Ethereum's consensus costs low. The technology, however, rests on elliptic-curve math that a sufficiently powerful quantum computer running Shor's algorithm could unpick, enabling an attacker to forge a validator's signature. Because the current deposit contract accepts BLS keys only at a fixed, hard-coded size, the network could not onboard a quantum-resistant signature even if one were agreed on tomorrow; the draft answers that by tagging each deposit with the cryptographic scheme it uses, while future tags remain open for schemes that do not exist yet. If adopted, the contract would go live with BLS onboarding still active while alternative schemes register beside it; a subsequent vote could permanently bar new BLS deposits, though existing validators would remain and newcomers could no longer enter with BLS keys. The proposal additionally retires the deposit-processing framework in use since staking launched in 2022, shifting deposits onto the newer system that already manages withdrawals and validator changes. The push traces to Google Quantum AI's March research, which outlined five quantum attack vectors on Ethereum and estimated that more than $100 billion in assets could be exposed across wallets, staking venues, smart contracts and layer-2 networks. The Ethereum Foundation currently targets around 2029 for the core protocol changes, and this validator-side overhaul is one half of a broader migration: EIP-8141, a Frame Transactions proposal eyed for the Hegotá upgrade later this year, would let ordinary Ethereum accounts change the cryptography authorizing their transactions without switching addresses. A repository maintainer has suggested numbering the new proposal EIP-8394.

The draft stops short of a finished upgrade: contract address, bytecode and activation timestamps remain undecided, with the post-quantum scheme deferred to a future EIP. It does specify the migration shape — a coordinated fork across execution and consensus layers, a credential ceiling stretched from 96 bytes to 8,192 bytes, and a three-state switch keeping BLS live until a system call triggers irreversible retirement. For node operators, no immediate reconfiguration; for the 42.4 million staked ETH, the clock starts on a second-leg migration not yet designed. Unlike a token airdrop, this is infrastructure-level change — deeper than the blind signing risks familiar to wallet users — and the 2029 target is set by cryptographic milestones, not bear market cycles.