Ethereum researchers have successfully implemented quantum-resistant account protection through ERC-4337 smart accounts, marking a significant milestone in the platform's quantum preparedness. The implementation follows the proposal by Ethereum Foundation privacy project lead Nico, who had previously suggested that Ethereum accounts could begin preparing for post-quantum risks without waiting for a hard fork update. According to Nico's June 2026 post on X, the current cost would be approximately $0.07 per account, representing account-level protection rather than a full chain upgrade. This approach allows users or wallet teams to add protection through smart contract logic while Ethereum developers continue working on longer-term protocol changes. The proposal centers on using SPHINCS+, a stateless hash-based signature scheme, for post-quantum signature verification directly on the Ethereum Virtual Machine, with the researcher's claim that protection is available now, rather than years away, shifting the conversation from theoretical risk to practical deployment.
The technical implementation centers on SPHINCS+, an EVM-optimized family of stateless post-quantum signatures designed to verify post-quantum signatures on Ethereum at practical on-chain costs. As reported in the Ethereum Research post, a Solidity verifier can already check post-quantum-style signatures at practical cost, with one optimized variant called C13 verifying at approximately 127,000 gas using a 3,704-byte signature. The design uses hash-based signatures that aim to resist attacks from future quantum computers, addressing the vulnerability of current ECDSA signatures used by Ethereum and Bitcoin accounts. The stateless nature of SPHINCS+ means it does not require users to maintain additional data between transactions, reducing complexity for wallet developers and lowering the barrier to adoption. The implementation through ERC-4337 smart accounts provides a standardized framework for quantum-resistant account protection across the Ethereum ecosystem.
Google's latest quantum computing research has significantly escalated the quantum threat to Ethereum's security. A Google Quantum AI paper published in March 2026 cut the estimated hardware needed to break Ethereum's account security by 20 times, reducing the qubit requirement from tens of thousands to approximately 1,200 logical qubits. This revised estimate has been credible enough for Google to set an internal 2029 deadline for migrating its own systems, moving the quantum threat from theoretical to scheduled. The current quantum hardware cannot yet break Ethereum's cryptography, but the 1,200-qubit figure represents a number engineers can plan around, with a small portion of Ethereum's dormant funds, roughly 0.1%, already sitting in accounts that have exposed their public keys and are technically vulnerable now.
The Ethereum Foundation has established comprehensive post-quantum security initiatives in response to these threats. The Foundation formed a dedicated Post-Quantum Security team in January 2026, led by Thomas Coratger, and tracks its work publicly at pq.ethereum.org. Justin Drake, one of Ethereum's most prominent researchers, has identified post-quantum risk security as a top strategic priority. The Foundation launched the Poseidon Prize, a $1 million research award targeting improvements in hash-based cryptographic primitives, building on three post-quantum cryptography standards that NIST finalized in August 2024. Near-term, EIP-8141, which introduces native account abstraction and allows accounts to choose their own signature scheme, is under consideration for the Hegotá hard fork planned for the second half of 2026. Full protocol readiness targets approximately 2029, the same deadline Google set for its own systems.
While Ethereum leads in institutional quantum preparedness, the broader blockchain industry has not matched its response. Bitcoin, Solana, and other major blockchains face similar underlying vulnerabilities from ECDSA signature schemes but have not formed dedicated post-quantum security teams or published comparable roadmaps. The Foundation's Kohaku project lets anyone deploy a quantum-resistant smart account using the ERC-4337 account abstraction standard, no hard fork required, for roughly $0.07 on the Layer 1 testnet, providing immediate user accessibility. For users who want to act now, this approach allows quantum-resistant account security without waiting for full protocol changes, with the $0.07 per account cost structure suggesting the implementation could scale across millions of accounts without creating prohibitive gas burden on the network.**
