Back to all reports

以太坊研究日报

Ethereum Research Daily

Vitalik responded to bunker mode: he does not recommend scrambling to move funds today, but the risks to cryptography from AI-accelerated math should be taken seriously. soispoke explained how EIP-8288 lets privacy apps generate post-quantum proofs on user devices while nodes verify them outside the EVM. Account abstraction specs were reshaped: EIP-8130 is narrowed to the Keystore with its transaction type moved to a new EIP, and several frame-related PRs to EIP-8141, EIP-7906 and EIP-8250 were merged. ACDE #247 met in the evening.

Image for October 8, 2026

Image: ethresear.ch, Exposing an ISA for post-quantum proofs on Ethereum (soispoke)

Post-quantum and privacy: EIP-8288 and Vitalik's response

ethresear.ch: exposing an ISA for post-quantum proofs on Ethereum

22:34 (soispoke, post at 22:59). EIP-8288 lets transactions depend on leanSPHINCS signatures and leanSTARK proofs declared in the dependency frame of an EIP-8141 frame transaction. Nodes check them before forwarding, and each block carries one recursive STARK proving all its dependencies valid. Today's privacy pools verify Groth16 proofs in-contract with the BN254 pairing precompile, which a quantum computer that breaks BN254 could forge. With EIP-8288, the pool contract only checks that the transaction depends on a proof for its own circuit with the expected public inputs. The post compares the EVM, RISC-V and an eISA designed for proving.

https://ethresear.ch/t/exposing-an-isa-for-post-quantum-proofs-on-ethereum/26136

post

Ethresear.ch: exposing an ISA for post-quantum proofs on Ethereum, 22:34 (soispoke, post at 22:59). EIP-8288 lets transactions depend on leanSPHINCS signatures and leanSTARK proofs declared in the dependency frame of an EIP-8141 frame transaction. Nodes check them before forwarding, and each block carries one recursive STARK proving all its dependencies valid. Today's privacy pools verify Groth16 proofs in-contract with the BN254 pairing precompile, which a quantum computer that breaks BN254 could forge. With EIP-8288, the pool contract only checks that the transaction depends on a proof for its own circuit with the expected public inputs. The post compares the EVM, RISC-V and an eISA designed for proving.

https://x.com/soispoke/status/2108225737991795099

AA specs: splitting EIP-8130 and tightening frame transactions

Other updates

Community