Ethereum Foundation Sets Dec. 2029 Quantum-Resistance Deadline

The Ethereum Foundation has set a firm deadline of December 2029 to make Ethereum quantum-resistant across the execution layer, the consensus layer and stored on-chain data. The Foundation’s Protocol Cluster published the timeline while grading 62 proposed EIPs for Hegotá, the hard fork following Glamsterdam, and described Hegotá as the first test of the 2029 target.

The Protocol Cluster wrote that it is planning for a Q-day — the point at which quantum computers can break current cryptography — as early as 2030. “Planning for Q-day in 2030 is a deliberately aggressive assumption,” the Foundation wrote, and said it is front-running most credible forecasts. The Foundation cited research indicating roughly 65% of ETH is already in addresses vulnerable to quantum attacks.

The Foundation said it will treat the December 2029 deadline as non-negotiable for planning purposes until at least January 2027, when outside experts will reassess quantum-computing progress and the project’s timeline. Hegotá will determine whether the sequence of later forks can meet the deadline.

Full quantum resistance requires coordinated changes to execution, consensus and stored data. The Protocol Cluster estimates the work will span five hard forks; meeting the December 2029 date would require an average of about 7.2 months per fork, a schedule the cluster described as aggressive.

On the execution layer, the cluster identified Frame Transactions as a must-ship item. Frame Transactions are designed to create a path for new signature schemes and allow accounts to move away from secp256k1 without requiring a separate hard fork for each new scheme. The cluster placed EIP-8298 and EIP-8151 together in its A-tier package to enable account migration off secp256k1, and listed EIP-8365 as the start of retiring validator withdrawal credentials tied to vulnerable cryptography.

Changes to the consensus layer are constrained because its cryptographic primitives cannot be swapped without a fork. The cluster deferred some consensus work until designs are complete. Hash-Chain RANDAO received a B-tier grade as sound in direction but early in sequence. Proposed precompiles for ML-DSA verification were ranked C tier after the cluster declined to standardize a single signature scheme before a dedicated cryptographic review.

The Protocol Cluster published two companion posts: an EIP opinion post and tier list that evaluated all 62 proposals for Hegotá, and a Current and Emerging Priorities post outlining commitments, research plans and the quantum-resistant deadline. The Foundation said the December 2029 date will guide planning until outside experts reassess in January 2027.

Making smart contract accounts, validator keys and on-chain data quantum-resistant requires introducing post-quantum signature schemes and migrating existing keys and credentials. Some protocol components can be made flexible to support multiple schemes without repeated hard forks, while other components will require carefully timed consensus upgrades. The cluster’s tiering indicates which proposals the team considers ready to sequence and which need further cryptographic review before formal adoption.