Explainer

Is Ethereum quantum resistant? The current answer

Quip Network
Postquant Labs
·2 min read

No. Ethereum today is not quantum resistant, and the interesting part is what that specifically means, because most of what people fear is wrong and the real exposure is narrower and more actionable.

What breaks and what does not

Ethereum accounts are secured by ECDSA signatures over the secp256k1 curve. A sufficiently large, error-corrected quantum computer running Shor's algorithm derives a private key from an exposed public key, which forges transactions from that account. That machine does not exist today. The Ethereum Foundation estimates that quantum computers could break ECDLP-256 by the early 2030s, with Google planning to internally migrate to post-quantum cryptography by 2029.

Is Ethereum quantum resistant today

What holds up: Ethereum's hashing (Keccak-256) is only weakened, not broken, by quantum attack. Grover's algorithm halves effective security, which still leaves a margin far beyond attack. The chain does not fall over, but rather it’s specific accounts that are at risk.

One nuance that matters: an Ethereum address is a hash of the public key, so an account that has never sent a transaction has not exposed its key. Signing anything reveals it, permanently. Active accounts are the exposed ones.

What Ethereum is doing about it

More than most chains. The Ethereum Foundation formed a dedicated post-quantum security team in January 2026 and publishes the work at pq.ethereum.org, with the roadmap entry at ethereum.org. The direction is hash-based signatures for validators, and account abstraction that lets individual accounts adopt a quantum-safe scheme before the protocol finishes migrating.

The cryptography is the settled part. NIST standardized quantum-safe schemes in 2024, including hash-based signatures. Coordination is what takes time: wallets, exchanges, contracts and every holder moving to new account types, a process measured in years. Until it is completed, keys exposed on chain stay exposed.

What you can do before the fork

Account-level protection does not need to wait for chain migration. A smart account can require a post-quantum signature to move funds, so even if the underlying curve breaks, the account does not. That is what Quip Accounts do on Ethereum and EVM L2s: assets stay on the chain they live on, held behind SHRINCS, a hash-based signature scheme, at the cost of extra gas per transaction for the larger signature.

So, while Ethereum the protocol is currently not quantum resistant and a full post-quantum migration will take years, an individual Ethereum account can be protected today.

Share
Filed underExplainer
More signalsKeep reading
Explainer
Oct 8, 2026·2 min read

Store now, decrypt later: the attack that starts before the computer exists

Quantum threats are unique. Store now, decrypt later is a strategy where an attacker records encrypted data today, stores it, and waits for a quantum computer capable of breaking the encryption to exist. The interception happens years before the cryptography even breaks, which means for long-lived secrets, the attack has already started. The deadline to secure secrets arrives before the machine does, because an attacker can record encrypted traffic now and decrypt it once the hardware exists.

Quip NetworkRead
Explainer
Oct 6, 2026·2 min read

Which blockchains are quantum resistant? The chain-level answer

Almost no blockchains are quantum resistant. Every major blockchain in use today settles ownership with elliptic-curve signatures, which a large enough quantum computer breaks. The work to change that is real and it is public, so it can be checked chain by chain rather than argued about. The test Quantum resistance means one thing at the chain level: the signature scheme that authorizes a spend rests on math a quantum computer cannot break. NIST finalized signature replacement schemes in 2024

Quip NetworkRead
Explainer
Sep 30, 2026·2 min read

What is a post-quantum wallet?

A post-quantum wallet is a wallet whose ownership rests on cryptography no known quantum computer can break. That one sentence does a lot of work, so here is what it means in practice and how to tell a real one from a label. The problem it solves Ordinary crypto wallets, MetaMask accounts and hardware wallets alike, prove ownership with elliptic-curve signatures. Shor's algorithm on a large enough quantum computer breaks those, deriving your private key from a public key you have already expo

Quip NetworkRead
Newsletter

Don't miss an update

Get new posts and project updates delivered to your inbox. No spam, unsubscribe anytime.