Hegotá upgrade

Ethereum has set a December 2029 target to achieve quantum resistance across its core protocol layers, aligning with timelines announced by Google, Cloudflare and Microsoft. The Hegotá upgrade, now entering its formal scoping phase, will determine whether this aggressive post-quantum security roadmap can stay on track.

• Ethereum Foundation’s nine Protocol teams assessed 62 EIPs for Hegotá, with roughly 60 researchers and engineers contributing to the evaluation process.
• Full post-quantum resistance across execution, consensus, and data layers is targeted for December 2029, matching Q-day preparedness deadlines set by major technology firms.
• The December 2029 deadline remains “non-negotiable” only until January 2027, when progress in quantum computing will trigger a formal reassessment with external experts.

• 62 EIPs proposed for Hegotá were evaluated by protocol teams across nine domains.
• Dec 2029 Target date for full quantum-resistant Layer 1 readiness across all protocol layers.
• 7.2 months Required average fork cadence to meet December 2029 deadline through L* fork.

Ethereum is pursuing a multi-fork strategy to prepare its Layer 1 protocol for quantum-resistant cryptography, with a deadline of December 2029 that aligns security objectives alongside ongoing work on privacy, finality, and state management. The Ethereum Foundation disclosed its roadmap on September 8, revealing that 60 researchers, engineers, and domain experts across all nine Protocol teams had completed a unified assessment of proposed improvements, grading 62 EIPs through a rigorous evaluation process that produced 397 individual grades before contested proposals were discussed as a group.

Post-quantum cryptography represents the single highest priority for the protocol’s near-term development cycle, though the exact date when quantum computers could render current cryptographic systems obsolete remains uncertain. The threat posed by quantum computing to blockchain security has become increasingly prominent as quantum processor capabilities advance, prompting major technology platforms and digital infrastructure providers to accelerate their cryptographic migration plans.

Aggressive Timelines Account for Quantum Computing Uncertainty

The December 2029 target deliberately assumes an earlier Q-day than most credible estimates suggest, reflecting Ethereum’s position that the protocol should prepare for quantum threats even if they materialize later than planning assumptions predict. Industry consensus on the timeline for quantum computers powerful enough to break modern encryption varies widely, with estimates ranging across several decades, but the precautionary principle increasingly guides security strategy across critical infrastructure.

The Ethereum Foundation acknowledged that established estimates generally place Q-day later and that it may never arrive, but the organization said the protocol must operate under deliberately aggressive assumptions to ensure readiness. This approach mirrors defensive strategies adopted by Google, Cloudflare, and Microsoft, which have set comparable migration timelines for their own infrastructure. Such coordinated timelines across the technology industry reflect recognition that cryptographic transitions require years of development, testing, and standardization before deployment at scale.

However, the December 2029 deadline carries a critical caveat: it remains “non-negotiable” only until January 2027, when the protocol will reassess progress in quantum computing research alongside input from outside experts. This built-in review mechanism acknowledges that quantum computing forecasts remain inherently uncertain and subject to revision as new technical developments emerge.

Hegotá Upgrade Determines Post-Quantum Roadmap Feasibility

Hegotá itself is not the quantum-resistant upgrade but rather the fork that will establish whether the subsequent forks can meet the December 2029 target. Under the current roadmap, Glamsterdam is scheduled for December 2026, while full post-quantum readiness sits at L*, five forks after Hegotá. Reaching that target would require an average fork cadence of 7.2 months, a compressed timeline that reflects the urgency of the initiative and represents an accelerated upgrade schedule compared to historical fork cycles.

Two proposals have emerged as the primary focus for Hegotá: FOCIL, which addresses transaction inclusion by allowing validators to impose requirements on builders, and Frame Transactions, which enables account abstraction and provides a path toward replacing the vulnerable secp256k1 key scheme currently used across Ethereum. Only two of the 62 proposed EIPs received an S grade, indicating they “must ship.” Fifteen earned A grades and are expected to be included, while eight landed in B and seven in C. The Foundation declined 28 proposals and left two pending until additional mainnet evidence becomes available.

The rigorous tiering process reflects Ethereum’s commitment to balancing security urgency with protocol stability and thorough testing. Each tier represents a distinct assessment of necessity, feasibility, and risk, ensuring that only changes with strongest justification advance to implementation. The concentration of top-tier scores on quantum-related proposals underscores how post-quantum security has reshaped protocol development priorities.

Scope Constraints Prioritize Security Over Feature Expansion

The Ethereum Foundation explicitly stated there is “little appetite” for additional consensus-layer scope in Hegotá unless a proposal directly supports post-quantum readiness. Limited testing and engineering capacity are cited as major considerations as developers prepare Hegotá and the forks that will follow, requiring a disciplined approach to scope management across the upgrade sequence. This disciplined prioritization reflects lessons learned from previous upgrade cycles and recognition that security-critical changes demand more rigorous testing than feature additions.

Vitalik Buterin shared related quantum-security planning in February, when he outlined plans to replace vulnerable consensus-layer BLS signatures and introduce account abstraction through EIP-8141. Rather than treating quantum resistance as a single coordinated upgrade, Ethereum’s current roadmap distributes the work across multiple forks, with post-quantum developments proceeding alongside improvements to privacy, state management, fast finality, and mandatory execution proofs. This approach reduces the risk that a single fork becomes too complex while maintaining steady progress toward the overall security objective.

The multi-fork strategy also allows the ecosystem and validator infrastructure time to adapt to each change incrementally, reducing upgrade-related disruption and providing natural checkpoints for reassessment if technical challenges emerge. This distributed approach to post-quantum migration contrasts with alternative strategies that consolidate all security changes into a single major upgrade.

The Protocol cluster plans to host a Reddit AMA on September 16 at 2 p.m. UTC to discuss its priorities, the Hegotá tier list, and community questions regarding the quantum-resistance timeline.