Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
<a href="https://www.google.com/preferences/source?q=finance.biggo.com” rel=”nofollow noopener” target=”_blank”>Add to Google Preferred Sources
Ethereum co-founder Vitalik Buterin has proposed EIP-8288, a mechanism that could cut the cost of quantum-resistant signatures by over 99%. The proposal, merged into the Ethereum EIP repository on September 9, 2026, would aggregate pending transactions into recursive STARK proofs within the mempool, shifting expensive verification work off the main execution path. Buterin estimates quantum-safe transactions could require roughly 10 million gas under current conditions, but the new architecture could bring costs down to the low tens of thousands. The proposal is targeted for the I-Star upgrade following the Hegota fork, though no inclusion has been confirmed. It aligns with the Ethereum Foundation’s December 2029 deadline for making the base layer quantum-resistant. The approach could also enable private account abstraction and promote RISC-V as the standard instruction set for recursive STARK transactions.
Key Elements

Vitalik Buterin has outlined a mechanism that could reduce the cost of post-quantum signatures on Ethereum by more than 99%, potentially clearing a major obstacle to making the network resistant to future quantum computing attacks.
The Ethereum co-founder’s proposal, EIP-8288, was merged into the Ethereum Improvement Proposals repository on September 9, 2026. It introduces a framework for aggregating pending transactions into recursive STARK proofs before they enter a block, shifting computationally heavy verification work away from Ethereum’s main execution path.
The cost problem is stark. Buterin estimated that highly optimized privacy transactions currently require around 300,000 gas, while a quantum-safe implementation could balloon to roughly 10 million gas. Under the proposed architecture, those figures could fall to the low tens of thousands of gas, though he cautioned that actual numbers would depend on the cryptographic construction and implementation.
How the proposal works
Rather than each transaction carrying its own bulky proof, EIP-8288 would have transactions declare their quantum-resistant signatures and STARK proofs as dependencies. Mempool nodes would then periodically batch these dependencies together, generating a single compact recursive proof that verifies the entire batch at once.
Block creators would package the necessary proofs for transactions to be included in a block, meaning the main chain only needs to verify one aggregate proof instead of checking each signature individually. This structure also opens a path to private account abstraction, where a wallet’s internal logic and permissions could remain hidden while still being provably correct on-chain.
Buterin also noted that the approach could help establish RISC-V as the standard instruction set for recursive STARK transactions across the Ethereum ecosystem.
Timing and roadmap
EIP-8288 is an early-stage proposal, not a scheduled upgrade. It is slotted for consideration after the Hegota fork, under a placeholder name, I-Star, that signals intent more than commitment. Proposals at this stage typically go through months of community review, implementation testing, and client coordination before approaching mainnet readiness.
The timing carries weight, however. The Ethereum Foundation’s Protocol cluster has set December 2029 as the deadline for making Ethereum’s base layer quantum-resistant across its execution, consensus, and data layers, and has said it will treat that self-imposed deadline as non-negotiable at least until January 2027.
| Metric | Current Estimate | Post-Quantum Estimate | EIP-8288 Target |
|---|---|---|---|
| Optimized privacy transaction gas | ~300,000 | ~10,000,000 | Low tens of thousands |
Note: Figures are Buterin’s estimates and would depend on the final cryptographic construction and implementation.
What the proposal signals now is where Ethereum’s core research is pointed: toward quantum resistance and privacy being addressed at the protocol’s plumbing level, rather than bolted on as a separate layer.
Once added, BigGo Finance appears first in Google Search Top Stories, so you get the broadest, most up-to-the-minute, and most comprehensive global financial news first.
Source: finance.biggo.com