Ethereum Foundation launches post-quantum security hub with more than 10 client teams

Ethereum isn’t waiting for quantum computers to become a problem before figuring out how to survive them.

The Ethereum Foundation launched pq.ethereum.org on Wednesday, a dedicated resource hub for the protocol’s post-quantum security effort. The site consolidates a roadmap, open-source repositories, specifications, research papers, EIPs, and a 14-question FAQ written by the EF’s post-quantum team.

More than 10 client teams are already building and shipping devnets weekly through what the foundation calls PQ Interop, the foundation said in an X post earlier Wednesday.

The technical challenge is substantial. Quantum computers are widely believed to will eventually break the public-key cryptography that secures ownership, authentication, and consensus across Ethereum.

The EF’s position is that a cryptographically relevant quantum computer isn’t imminent, but migrating a decentralized global protocol takes years of coordination, engineering, and formal verification.

The migration touches every layer of the protocol.

At the execution layer, post-quantum signature verification through a vector math precompile would let users transition to quantum-safe authentication through account abstraction without a disruptive “flag day” where everyone has to upgrade simultaneously.

At the consensus layer, the current BLS validator signature scheme gets replaced with hash-based signatures called leanXMSS, with a minimal zk-based virtual machine handling aggregation to restore scalability since post-quantum signatures are larger.

At the data layer, post-quantum cryptography extends to blob handling for data availability.

This connects directly to the strawmap piece from earlier this month where Ethereum co-creator Vitalik Buterin called the document “very important” and walked through the finality improvements. The post-quantum push stood out then because it treated quantum threats as a concrete engineering problem with specific fork targets rather than a hypothetical.

While quantum computing represents a threat category that attacks the cryptographic foundations rather than the physical infrastructure, the protocols that prepare earliest will be the most resilient when such a system eventually materializes.