Vitalik Buterin Proposes EIP-8288 to Slash Quantum-Safe Transaction Costs
The proposal introduces recursive STARK mempools to lower gas fees for privacy protocols and quantum-resistant cryptography.
Ethereum co-founder Vitalik Buterin has proposed EIP-8288, a technical shift designed to drastically reduce the gas costs associated with quantum-safe signatures and privacy protocols. The proposal aims to secure the network against future cryptographic threats without making secure transactions prohibitively expensive for users.
At the core of EIP-8288 is the introduction of recursive STARK-based aggregation within the mempool. By utilizing recursive STARKs, the network can aggregate multiple quantum-resistant signatures and proofs into a single, more efficient verification process. This mechanism is specifically intended to lower the high gas overhead currently required for quantum-safe cryptography and advanced privacy protocols, making them viable for mainstream on-chain use.
The Roadmap to I-Star
Buterin has expressed hope that EIP-8288 will be integrated into the upcoming "I-star" (or IStar) upgrade. This follows the scheduled "Hegota" upgrade, which is currently targeted for the second half of 2026. The Hegota phase serves as a prerequisite for these deeper architectural changes, focusing on immediate execution-layer bottlenecks. Specifically, Hegota will introduce native smart accounts via EIP-8141 and implement binary state trees through EIP-7864 to optimize state tree proving costs.
Why Quantum Resistance Matters
The push for EIP-8288 is driven by the long-term threat posed by quantum computing, which could potentially break the cryptographic signatures currently securing the Ethereum blockchain. While quantum threats are not immediate, the transition to quantum-resistant standards is computationally expensive. By slashing these costs now, Ethereum ensures that the transition to a post-quantum security model does not result in a surge of transaction fees that would price out average users or stifle the deployment of privacy-preserving tools.
The Path Forward
Beyond the immediate gas savings, the move toward recursive STARKs is seen as a driver for Ethereum's broader architectural evolution. While the network continues to refine its execution layer, the industry is watching how these changes will facilitate a transition toward more efficient instruction sets. The success of EIP-8288 will likely determine how quickly Ethereum can adopt a fully quantum-safe posture while maintaining the scalability required for global adoption. For now, the community awaits the formalization of the I-star upgrade and the successful deployment of the Hegota milestones in late 2026.