The Ethereum Foundation’s protocol team set December 2029 as the deadline for the network to resist quantum computer attacks across its execution, consensus, and data layers, in a blog post p
The Ethereum Foundation’s protocol team gave itself a deadline this week. In a blog post published September 7, the Foundation’s Protocol Cluster said Ethereum’s base layer needs to withstand attacks from quantum computers, across its execution, consensus, and data layers, by December 2029.
The vehicle for getting there is Hegotá, Ethereum’s next scheduled network upgrade, targeted for 2027 according to Ethereum’s own roadmap. The Foundation is specific about what Hegotá is not: “Hegotá is not the PQ fork; it is the fork that decides whether the PQ forks happen on time,” the post says. Developers graded 62 proposals for the upgrade and marked two as must-ship. One, EIP-7805, hardens the network against censorship by letting validators force transactions into blocks. The other, EIP-8141, does the actual quantum work. It lets an Ethereum account swap out today’s signature scheme, elliptic-curve cryptography, the same math a sufficiently powerful quantum computer is expected to eventually break, for a post-quantum one, without waiting on a network-wide forced migration.
On the size of the actual risk, Ethereum’s own site is specific and modest. It puts the network’s quantum-vulnerable dormant fund exposure at approximately 0.1%, a figure it calls far lower than other major blockchains. No quantum computer today threatens Ethereum’s cryptography, the site says, and migration is something users are expected to do later, once post-quantum signatures are broadly supported, not something to act on now.
That is not the number that has driven coverage of this deadline. A separate figure, that roughly 65% of ETH sits in addresses that would be exposed to a quantum attack, has spread through reporting on the announcement this week, often sitting right next to Ethereum’s 2029 date as though the two came from the same place. It does not appear anywhere in the Foundation’s September 7 post, or on its dedicated quantum-resistance page.
The 65% figure traces instead to Project Eleven, a startup that builds and sells the kind of protection this deadline is likely to create demand for, including a Bitcoin address registry and a wallet-security product called Quantum Vault, built on the same account-abstraction approach EIP-8141 is now adding to Ethereum’s base protocol. Project Eleven raised a $20 million Series A in January, led by Castle Island Ventures with Coinbase Ventures among the other backers. “We’re not waiting for Q-Day,” the company wrote in its own announcement. “We’re taking action now to secure the networks and trillions of dollars in assets they protect.” A firm that sells quantum protection has an obvious interest in a bigger number. That does not make 65% wrong. It does mean the statistic carrying this week’s coverage came from a company with a stake in it sounding urgent, not from Ethereum’s own protocol team.
This is not Ethereum’s first pass at the problem, either. Buterin floated a quantum contingency plan back in March 2024, a “pretty simple recovery fork” that would only trigger after an attack, rolling the chain back and moving survivors onto quantum-safe wallets. That was a reactive sketch, written before there was anywhere on the calendar to put it. This week’s deadline is not reactive. It has a grading system, a must-ship list, and a date.
Whether that date holds is now a matter of execution, not intent. Hegotá still has to ship EIP-8141 on schedule, two years ahead of the deadline it is meant to protect, and whatever forks follow it still have to land on time after that. A deadline is a plan. A quantum-resistant Ethereum is a network that has actually been rebuilt.
