Vitalik Buterin is proposing a technical overhaul that could make quantum-resistant privacy on Ethereum dramatically cheaper — potentially reducing costs by more than 99% in a single move.
According to reporting by Decrypt, the Ethereum co-founder co-authored EIP-8288, a specification that bundles heavy cryptographic operations into a single proof per block rather than forcing the network to verify each one individually. The math is striking. Private transactions that currently cost around 10 million gas to make quantum-safe could drop to the low tens of thousands of gas under this approach.
The proposal addresses a real problem. Post-quantum cryptographic signatures today consume 2–3 kilobytes and cost 150,000–200,000 gas each to verify on-chain. Recursive STARK proofs — which provide stronger security guarantees — are even heavier, ballooning to 128–512 kilobytes and driving verification costs into the millions of gas. For context, a standard private transaction costs roughly 300,000 gas today; adding quantum resistance makes it ten times more expensive.
How EIP-8288 Sidesteps the Cost Problem
The mechanism is elegant in its simplicity: instead of putting the cryptography on-chain directly, transactions declare a short “dependency” — a 96-byte claim stating that some message was signed by a key or some data satisfies a proof. Mempool nodes collect these claims every second, generate a single recursive STARK proof covering all of them at once, and pass the result forward. The final block carries just one proof validating everything in it.
This batching approach shifts the computational burden away from Ethereum’s main execution layer. Fewer on-chain operations means lower gas consumption, which translates directly to cheaper transactions.
The RISC-V Question
The proposal hinges on adopting RISC-V, an open instruction set architecture, as Ethereum’s canonical language for recursive proofs. Buterin publicly called this a “big decision” requiring careful deliberation. RISC-V is already established in chip design and offers broad industry support, but enshrining it into Ethereum’s core protocol would be a material commitment.
The move aligns with Buterin’s broader Lean Ethereum roadmap, which he sketched in July. That vision would rebuild major protocol components over three to four years and position recursive STARKs as a foundational layer rather than an add-on.
Broader Privacy and Account Abstraction Use Cases
Beyond quantum resistance, EIP-8288 unlocks other applications. Buterin outlined private account abstraction as one example — allowing an account’s logic to remain hidden on-chain while enabling a single transaction to transfer ownership of all positions and holdings attached to it simultaneously, without revealing which ones moved.
Timeline and Next Steps
EIP-8288 is currently a draft proposal and does not yet have a scheduled fork assignment. Buterin has indicated he wants both this specification and Frames (a companion transaction protocol overhaul he promoted separately) included in I-star, the Ethereum upgrade planned after Hegota. He has characterized I-star as potentially Ethereum’s last major fork before entering the Lean era.
Neither proposal has been formally scheduled, and moving from draft to consensus within the Ethereum developer community typically takes months. The technical merits are clear, but community adoption is never guaranteed.