Vitalik Buterin and Thomas Coratger's EIP-8288 would move post-quantum signatures and STARK proofs off Ethereum's execution path, batching them into one recursive proof per block. Buterin says a quantum-safe private transaction costing about 10 million gas today could fall to the low tens of thousands. The proposal remains a draft, depends on the unscheduled Frames overhaul, and has not been assigned to a fork.
Vitalik Buterin wants Ethereum to stop verifying post-quantum signatures on-chain. EIP-8288, the draft he co-authored with Thomas Coratger, would push that cryptography into the mempool and collapse a quantum-safe private transaction from roughly 10 million gas to the low tens of thousands.
"Post-quantum signatures currently run to 2 or 3 kilobytes and cost 150,000 to 200,000 gas to verify," Buterin said, describing a proposal he hopes lands in I-star, the fork after Hegota. STARK proofs are heavier still — over 128 kilobytes, and as much as 512 kilobytes when generated quickly — which puts verification in the millions of gas.
The mechanism is a "dependency." Rather than carrying its own proof, a transaction declares a 96-byte claim that some message was signed by some key, or that some data satisfies some proof. Mempool nodes collect those claims every second, generate one recursive STARK covering all of them, and pass it forward. The block then carries a single proof for everything inside it. Aggregation happens at the mempool and block-builder layer, not at consensus, so no simultaneous node upgrade is required.
The cost gap is the whole argument. A well-engineered private transaction costs about 300,000 gas today, according to Buterin. Make it quantum-safe and the bill runs to roughly 10 million gas. Under EIP-8288, he said, both land in the low tens of thousands — a reduction of more than 99% on the quantum-safe path.
Aggregating proofs requires a shared language for expressing statements, and the leading candidate is RISC-V, the open instruction set used in chip design. Adopting EIP-8288 would make RISC-V Ethereum's de facto canonical instruction set — a "big decision," Buterin said, that should be taken carefully and that he considers necessary. He floated the same move in July, in a Lean Ethereum roadmap that would rebuild nearly every major protocol component over three or four years and enshrine recursive STARKs at the core.
The proposal was first put forward on June 5, 2026, and merged into the Ethereum EIP repository on September 9, 2026, as PR #11772 after peer review. Forum discussion in June centered on two open questions: recursion soundness, or whether nested STARK proofs keep their security guarantees as they aggregate, and omission accountability, or what happens when a block builder drops a transaction's proof from the batch, accidentally or otherwise. Neither concern produced a proposed change to Ethereum's consensus architecture.
EIP-8288 also depends on Frames, the transaction overhaul Buterin promoted on Sunday. Frames is itself unscheduled. Neither proposal has been assigned to a fork, and I-star — which Buterin has described as Ethereum's last upgrade before the Lean era begins — has no confirmed date.
Cheaper aggregation changes the economics of anything built on zero-knowledge proofs on Ethereum. Rollups already lean on STARK and SNARK proofs for their security model, and a base layer optimized for batching them makes L2 settlement cheaper. Privacy protocols get the same treatment: proof verification costs amortize across an entire block's worth of transactions instead of landing on one user.
Buterin sketched one further use — private account abstraction, which would keep an account's logic hidden on-chain and let ownership of every position and holding attached to it change in a single transaction without revealing which ones moved.
The near-term read for ETH is narrative, not fundamentals. A draft EIP with no fork assignment and a dependency on an unscheduled predecessor cannot change gas costs, validator economics, or fee burn today. What it does is extend Ethereum's quantum-resistance and ZK roadmap from a research direction into a specified, peer-reviewed design — and put a number on the prize. The next checkpoint is whether Frames and EIP-8288 get slotted into I-star, or whether both stay in the repository while the Lean transition takes shape.
This article is for informational purposes only and does not constitute investment advice.
