Ethereum researchers are exploring a way to harden user accounts against future quantum-computing threats without waiting for a disruptive network upgrade. According to Ethereum Foundation project lead Nicolas Consigny, the โSPHINCS-โ proposal could start delivering post-quantum protections for as little as $0.07 in on-chain verification costs, avoiding the need for a hard fork.
Consigny shared the idea in a Saturday post on X, linking to a technical paper hosted on Ethresear.ch. The work adapts SPHINCS+, a post-quantum signature scheme standardized by the US National Institute of Standards and Technology (NIST), to run more efficiently on Ethereumโs execution environment.
Key takeaways
- Ethereum could add early post-quantum account protections using Consignyโs โSPHINCS-โ approach without requiring a hard fork.
- The proposal targets lower on-chain signature verification costs by adapting SPHINCS+ to the EVM more efficiently.
- โSPHINCS-โ is positioned as a transitional step toward a future, even more cost-efficient system called โleanSPHINCS.โ
- The broader objective is to reduce long-term risk to Ethereumโs current Elliptic Curve Digital Signature Algorithm (ECDSA) once quantum capabilities advance.
A bridge to post-quantum signatures on the EVM
In the X thread, Consigny points to a paper proposing โSPHINCS-,โ a variant designed to make SPHINCS+ signatures cheaper to verify on Ethereum. Unlike some migration plans that require protocol changes, the proposal is intended to reduce on-chain verification costs without mandating a protocol update or a dedicated precompile.
That distinction matters for Ethereum users and developers because it aims to make post-quantum readiness possible on a shorter timeline. Hard forks are expensive in governance and coordination, and they introduce additional operational complexity for wallets, contracts, and infrastructure. A solution that can be introduced with fewer low-level changes lowers the practical barrier to moving away from purely ECDSA-based assumptions over time.
The paperโs core framing is that โSPHINCS-โ can function as a bridgeโa starting point that brings account protections closer to post-quantum security while the ecosystem works toward a longer-term, more optimized signature scheme.
Why Ethereum is looking beyond ECDSA
The quantum concern is straightforward: if sufficiently capable quantum computers become available, the cryptography underpinning todayโs elliptic curve signatures becomes vulnerable. The article attributes the motivation directly to the long-term threat posed to Ethereumโs use of the Elliptic Curve Digital Signature Algorithm (ECDSA).
Consignyโs approach is built around the idea that post-quantum signatures should be available before the ecosystem reaches a point where a dedicated hard fork or a full replacement becomes unavoidable. In other words, the proposal is less about โsolving quantum tomorrowโ and more about narrowing the window of unpreparedness.
For investors and operators, this shifts the discussion from purely theoretical security to migration readiness. Even if timelines for large-scale quantum attacks remain uncertain, the key economic question becomes how quickly the network can reduce reliance on vulnerable primitives.
โleanSPHINCSโ and the direction of travel
In describing SPHINCS-, Consigny also highlights a further goal: eventual migration to โleanSPHINCS.โ The paper characterizes leanSPHINCS as a future system intended to cut verification costs even more, with the help of signature aggregation.
This matters because signature verification costs are not just a technical detailโthey affect how feasible post-quantum security is for everyday transactions. If aggregation reduces the amount of computation or on-chain work required per authorization, it can help move post-quantum schemes from โprototype-readyโ to โeconomically practical.โ
At the same time, the bridge approach implies trade-offs: SPHINCS- is designed to improve efficiency now, but it is still framed as an interim step rather than the final end state.
Quantum risk conversations spread across Bitcoin and Ethereum
The Ethereum proposal lands in a broader wave of crypto security discussions about how quantum advancements could impact blockchain cryptography.
Earlier this year, a post-quantum research effort by Project Eleven awarded a prize to Giancarlo Lelli for work involving a quantum computer capable of cracking a 15-bit elliptic-curve key. As the article notes, Bitcoin keys are 256 bits, far larger than the example that was factored. Still, the demonstration used a variant of Shorโs algorithmโa method that is widely discussed in relation to how quantum computers could theoretically threaten certain public-key cryptosystems.
Separate from the experimental headline, blockchain analytics has also tried to quantify exposure. The article cites Glassnodeโs estimates that about 1.92 million BTC (nearly 10% of supply) are considered โstructurally unsafeโ in a future quantum attack scenario, while another 4.12 million BTC (about 20.6%) are classified as โoperationally unsafeโ due to key or address management practices.
Glassnode also estimated that the remaining 69.8% (or 13.99 million BTC) appears unexposed, broadly aligning with an earlier Ark Invest estimate that 65% of Bitcoin supply was safe. While these classifications donโt eliminate uncertainty around quantum timelines, they show that market participants are treating quantum risk as something that can be managedโat least partiallyโthrough operational practices.
For Ethereum, the SPHINCS- proposal can be viewed through the same lens: rather than waiting for an emergency upgrade, developers are exploring mechanisms to reduce long-term cryptographic fragility in advance.
What to watch next is whether Ethereum implementers can validate the proposalโs practical on-chain performance in real execution conditionsโparticularly whether the claimed low verification cost remains consistent as systems scaleโand how the community plans the longer transition toward leanSPHINCS and any eventual broader post-quantum signature rollout.
