- The Ethereum Foundation set December 2029 as a firm deadline for a quantum-resistant Layer 1.
- Only two proposals earned must-ship status in the Hegota upgrade: FOCIL and Frame Transactions.
- The Foundation rejected 28 EIPs to protect testing capacity and keep the post-quantum schedule intact.
- A formal reassessment in January 2027 could still move the target date.
The Ethereum Foundation’s Protocol Cluster published a single unified roadmap on September 7, 2026, committing Ethereum Layer 1 to full quantum resistance across its execution, consensus, and data layers by December 2029. The same document graded 62 Ethereum Improvement Proposals for the upcoming Hegota upgrade and sorted them into a public tier list, cutting the scope hard so that the heavier post-quantum work later in the decade does not slip. This is the first time the Foundation has issued one ranked sheet rather than separate opinions from each research team, and the message behind the ranking is blunt: fewer changes now, so the cryptographic overhaul can land on time.
Two EIPs the Foundation would rather delay the fork than drop
Only two proposals reached S-tier, the mandatory “must ship” status. The Foundation attached an unusual condition to both. If either one hits technical friction during development, the entire Hegota timeline gets pushed back rather than the proposal being quietly cut.
The first is EIP-7805, known as FOCIL (Fork-Choice Enforced Inclusion Lists). It builds censorship resistance directly into the protocol, giving users a cryptographic route to force a transaction onto the base layer without depending on block builders who could otherwise filter it out.
The second, EIP-8141 (Frame Transactions), carries more weight for the quantum question. It enshrines native account abstraction, which turns ordinary wallets into programmable smart contracts. That change lets users pay gas in assets other than ETH, but its real strategic value sits underneath: it creates the structural path to move individual accounts onto post-quantum authentication later, one wallet at a time, without a forced network-wide migration.
Why 62 proposals collapsed into one grading sheet
Roughly 60 researchers, core engineers, and domain specialists across nine teams produced 397 raw peer evaluations. The Protocol Cluster compressed those grades into a single hierarchy for a reason it stated plainly: limiting “complexity compounding,” where each extra EIP in a fork multiplies testing surface and coordination cost across every client team.
Twenty-eight rejections against two mandatory approvals shows where the Foundation set its priority. Shipping less is the mechanism protecting the 2029 date, not a side effect of it.
That squeeze plays out proposal by proposal: one contested issuance change filed against the same Hegota deadline would drive Ethereum staking rewards toward zero, and it still has no confirmed slot.
Why a gas-payment feature is really quantum infrastructure
Every standard account signs transactions using ECDSA on the secp256k1 curve, and the moment an address sends a transaction, its public key becomes visible on chain. A sufficiently powerful quantum computer running Shor’s algorithm could derive the private key from that exposed public key. Addresses that have only ever received ETH, and never signed, keep their public key hidden behind a hash, which buys them some protection.
Migrating the entire protocol to new signature schemes in one coordinated event would be enormously risky. Account abstraction sidesteps that. By letting each account behave like a smart contract, EIP-8141 gives individual users signature agility, so a wallet can switch to a post-quantum scheme on its own schedule, guided by wallet software, without the whole network moving in lockstep. That is why the Foundation treats a proposal marketed on gas sponsorship as core quantum infrastructure.
The 7.2-month cadence that has to hold five times running
Hegota itself is not a post-quantum fork. It functions as the gate that decides whether the larger cryptographic program proceeds on schedule, and everything after it depends on Ethereum sustaining a pace it has never sustained before.
After Glamsterdam, the Foundation assumes an average of one hard fork every 7.2 months across five sequential upgrades. That biannual rhythm replaces the old model of rare, sweeping annual overhauls. The intermediate J* milestone acts as a safety net, delivering a first layer of post-quantum protection before the complete migration arrives at L*.
Five research vectors run in parallel underneath the schedule: post-quantum security itself (moving from elliptic-curve cryptography to lattice- or hash-based schemes), native private transactions, faster consensus finality, a shift away from Merkle Patricia Trees toward a more efficient state structure that would cut node storage requirements and pave the way for stateless clients, and zkEVM proving systems fast enough to run post-quantum cryptography.
Why 65% of circulating ETH sits exposed right now
The 2029 date lines up deliberately with the post-quantum migration windows already published by Google, Cloudflare, and Microsoft, and the Foundation is working under an early assumption that “Q-Day,” the point at which quantum hardware can break current cryptography, could arrive as soon as 2030. Protocol research group Project Eleven estimates that around 65% of all circulating ETH currently sits in quantum-vulnerable addresses, meaning wallets whose public keys are already visible on chain. Passive holders who assume idle funds are safe are precisely the group this roadmap targets.
One caveat sits in the fine print. The December 2029 date is locked as non-negotiable only until January 2027, when the Foundation will hold a formal reassessment with external quantum computing experts and adjust if the evidence demands it.
Narrower forks and a wallet-by-wallet migration ahead
For developers, the immediate consequence is tighter forks and less room to lobby a favorite proposal into the next upgrade. A rejection rate approaching half of all graded EIPs sets the expectation for every future cycle, not just Hegota. For wallet providers and exchanges, the account-abstraction path signals that post-quantum migration will be a gradual, user-level process rather than a single hard cutover, shifting the engineering burden toward client software and user prompts over the coming years.
The next fixed point on the calendar is an official Ethereum Protocol Reddit AMA on September 16, 2026, where core developers will face direct questioning on the specific EIP grades and on whether a 7.2-month cadence can realistically hold across five consecutive forks. That session, followed by the January 2027 expert reassessment, will show whether the December 2029 target survives contact with the hardest constraint in the plan, which is not the cryptography but Ethereum’s own governance throughput.