Author: YQ

Translation: Deep Tide TechFlow

Deep Tide Introduction: At the recently concluded Devcon 8 conference in Mumbai, Ethereum Foundation researcher Justin Drake made shocking statements, proposing the complete realization of anti-quantum and anti-AI upgrades by the end of 2028. This is a full year ahead of the official roadmap, meaning the underlying network must deliver three major hard forks at a high frequency within 24 months.

Cryptographic algorithms are ready, but the reality of delivery capability has raised red flags. The Glamsterdam testnet has been forced to postpone until 2027 due to the Gas reservoir mechanism damaging several contract invariants. Ethereum stands at the crossroads of technological ideals and the complexity of system engineering; how to smoothly change tracks without disrupting the existing ecosystem has become the industry's most severe test.

Key Points Extraction

On the opening day of Devcon 8, Ethereum Foundation researcher Justin Drake set the goal for achieving "full post-quantum and post-AI era" for Ethereum at December 2028. This is a full year earlier than the previously planned deadline of December 2029 by the Foundation.

To achieve this vision by the end of 2028 means that Ethereum must continuously deliver three large hard forks within the next 24 months. However, looking back at Ethereum's version history in recent years, the actual delivery intervals for single hard forks usually range from 7 to 14 months.

The next phase's core upgrade, Glamsterdam, has stagnated after its launch on the Sepolia testnet. A brand-new "Gas reservoir" repricing rule unexpectedly disrupted eight core invariants long relied upon by existing smart contracts, making a mainnet upgrade almost guaranteed to be delayed until 2027.

At the underlying cryptographic level, the defense puzzle against quantum threats is basically ready: signature algorithms based on hash functions, the lightweight virtual machine leanVM, and sub-second real-time zero-knowledge proofs have all broken through engineering feasibility. Currently, the biggest bottleneck in the system is no longer theoretical algorithms, but how to smoothly complete industrial-grade engineering delivery without disrupting trillions of dollars' worth of existing DeFi contracts.

Mumbai Conference Data Overview: More Restrained Scale and Focused Values

The eighth Ethereum Developer Conference (Devcon 8) was held from November 3 to 6, 2026, at the Jio World Centre in Mumbai, India, marking the first time in Devcon's history that it has entered the South Asian subcontinent.

In terms of overall scale, the four-day conference featured 370 special speeches and 399 speakers, with the agenda reduced by about 43% compared to Devcon 7 held in Bangkok. This reduction in scale is a deliberate choice by the Ethereum Foundation, which recently streamlined 54 positions, accounting for about one-fifth of the total team size.

Image: Overview of core data and topic distribution at the Devcon 8 Mumbai conference

The agenda for this conference was entirely built around the core values of the Foundation. Two-thirds of the topics in the main venue were clearly labeled with the Ethereum Foundation's mission outline CROPS: Censorship Resistance, Open Source, Privacy, and Security.

Among all the labels, underlying security (70 sessions) and privacy protection (65 sessions) topped the discussion heat chart, with artificial intelligence-related topics (57 sessions) following closely behind. Ethereum co-founder Vitalik Buterin pointed out in his opening speech that modern digital technology generally requires users to give excessive blind trust while providing too little opportunity for public verification; Ethereum must comprehensively establish verifiable trust foundations from operating systems and chip architectures to communication and artificial intelligence.

The next developer conference (Devcon IX) has been officially scheduled for October 11 to 13, 2027, in Lisbon, Portugal.

Rushing Towards 2028: The Radical Timeline of the Post-Quantum Transition

According to the Strawmap roadmap drafted by the Ethereum Foundation architectural team, the hard forks following Glamsterdam advance in alphabetical order: H* corresponds to Hegotá, followed by I*, J*, K*, and L* versions.

On this radical evolutionary path, the construction plan for post-quantum Ethereum has been broken down into four key milestones:

Image: Ethereum's post-quantum evolution roadmap and hard fork delivery cycle estimation

The first step is Hegotá, launching in 2027. Although it is not purely a post-quantum fork, it will formally introduce the "Frame Transactions" architecture, allowing each on-chain account to freely bind independent signature schemes, laying the foundation for a complete farewell to the ECDSA elliptic curve algorithm in the future.

The second step is the I* fork, introducing a super lightweight virtual machine leanVM optimized for zero-knowledge proofs and natively supporting post-quantum lightweight transactions. The third step is the J* fork, fully implementing hash function-based validator signatures and post-quantum data sampling, defined by the Foundation as the "Minimum Viable Post-Quantum" defense line. Finally, in the K* and L* forks, mandatory state execution proofs will be enforced, completing the final loop of the Lean architecture.

Delivering three large hard forks within 24 months means an average of one successful launch every 8 months. However, the actual delivery intervals for Ethereum's last three upgrades were 11 months, 14 months, and 7 months, respectively, and the current Glamsterdam has already been 11 months since the last upgrade. At the current pace of engineering delivery, achieving all goals by the end of 2028 faces extremely high real resistance.

The urgency prompting core researchers to accelerate comes from two major external threats:

First, the threshold for quantum attacks is accelerating downward. Recent joint papers from teams at Google Quantum AI, the University of California, Berkeley, the Ethereum Foundation, and Stanford University indicate that breaking Ethereum's current elliptic curve signatures may require less than 1200 logical qubits (equivalent to less than 500,000 physical qubits). Such attacks can complete calculations in minutes, sufficient to directly hijack high-value transactions waiting to be packaged in the memory pool (Mempool).

Second, there have been unexpected breakthroughs in AI-assisted cryptographic cracking. In July of this year, Anthropic reported that its advanced large model discovered a new attack vector that reduced the recovery complexity of HAWK-256 signature keys based on lattice cryptography from 2 to the power of 64 down to 2 to the power of 38. Researcher Justin Drake stated that the industry must proactively enter a "bomb shelter defense state" to prevent AI-assisted mathematical cracking from breaching traditional cryptographic systems before physical quantum computers can.

Glamsterdam Failure Analysis: What Did the Gas Reservoir Rules Disrupt?

As a key node connecting the past and the future, the Glamsterdam hard fork has been live on the Sepolia testnet since October 6. Its core vision is to introduce EIP-8037 and EIP-8038, seeking to recover the execution Gas that was previously burned and reintroduce it into the so-called "Gas reservoir" to lower state storage costs.

However, on October 22, the core development team had to urgently withdraw the version from the second testnet. The security audit team discovered upon thorough review that this seemingly clever repricing rule disrupted eight core invariants long relied upon by existing smart contracts.

Image: Analysis of the Glamsterdam hard fork Gas reservoir mechanism and disrupted contract invariants

In the current Ethereum architecture, developers generally adhere to a series of ironclad rules: for example, the Gas consumption of external calls' sub-context will never exceed the limit set by the parent transaction; or transactions that revert cannot have lasting resource impacts on subsequent operations.

However, the new Gas reservoir mechanism breaks this determinism: even a malicious sub-transaction that is completely rolled back can accumulate unsettled refund amounts in the reservoir, resulting in abnormal Gas increments during the execution of subsequent legitimate code. This anomaly allows attackers to violently collide with CREATE2 contract address salt values at nearly zero cost and directly breaches the security verification logic of the Paymaster reimbursement contracts within the ERC-4337 account abstraction system.

The deployment of the main testing network Hoodi, originally scheduled for November 5, has been completely postponed. Core developers are still weighing whether to patch the reservoir algorithm or start completely over. Due to this setback, the Glamsterdam mainnet upgrade is likely to be pushed to the first quarter of 2027.

The Real Cost of Post-Quantum Consensus: From Hash Signatures to LeanVM Aggregation

If abandoning elliptic curves and shifting to hash signatures is an irreversible historical fate for Ethereum, then the underlying network must pay high bandwidth and storage costs for it.

Currently, the BLS aggregation signature used by Ethereum validators occupies only 96 bytes. In contrast, hash function-based signatures with quantum resistance traits (such as SPHINCS+ or its lightweight variant leanSPHINCS) typically exceed 4 KB in size, expanding over 40 times.

Image: Comparison of aggregation overhead based on hash signatures and LeanVM in post-quantum consensus layer

There are over 1.1 million active staking validators across the network. If millions of 4 KB signatures are indiscriminately broadcasted in every 12-second block slot, each slot will generate a terrifying data flood of over 4.4 GB, which would instantly asphyxiate any decentralized network.

The core killer solution to this dilemma is to introduce the state proof virtual machine leanVM. By utilizing the STARK proof system to recursively compress massive hash signatures at the validation node level, discrete validation from thousands of nodes can be packed into a single brief proof, recapturing bandwidth to a secure level of dozens of kilobytes. At the same time, the EIP-8450 proposal is establishing a unified post-quantum verifier public key registration directory to ensure a smooth transition of verification powers during cross-fork upgrades.

EIP-8288 Proposal: Let the Transaction Memory Pool Bear Complex Cryptography

In order to implement anti-quantum protection at the transaction execution layer without exhausting Ethereum's block space, core researchers have introduced the ambitious and sophisticated EIP-8288 proposal.

The core design philosophy of EIP-8288 is very clear: to keep the heavy burden of complex cryptographic proofs out of the underlying blockchain, allowing the distributed transaction memory pool and professional packers (Builders) to bear the computational load.

Image: EIP-8288 Transaction Memory Pool Encryption and Block Recursive Proof Workflow

Under this mechanism, quantum-resistant transactions initiated by ordinary users carry complete quantum-resistant encryption credentials upon entering the memory pool. However, at the moment the block producers package transactions on-chain, they will run an aggregation prover off-chain to unify the heterogeneous signatures of hundreds or thousands of transactions into a minimal recursive STARK proof, ultimately only writing a proof summary in the block header.

This mechanism brings three disruptive advantages: first, the actual Gas consumption of post-quantum signatures drops sharply from 150,000 to 200,000 Gas for direct on-chain verification to about 33,000 Gas; second, the on-chain verification cost of privacy transaction proofs plummets from millions of Gas to around 60,000 Gas; finally, the underlying network does not need to deploy specialized precompiled contracts for each emerging algorithm, allowing any cutting-edge cryptographic breakthroughs to be seamlessly integrated into Ethereum in the form of proofs.

Endgame Determinism: Shortened from Ten Minutes to Second-Level Confirmation

Aside from anti-quantum defenses, another core breakthrough established at the Ethereum consensus layer during the Mumbai conference is Single Slot Finality (SSF).

Currently, on the Ethereum mainnet, a transaction takes approximately 16 minutes from being packaged into a block to achieving irreversible finality, crossing two complete epochs. This severely limits the settlement efficiency of cross-chain bridges, decentralized exchanges, and centralized institutional channels.

Image: EIP-8453 Decoupled Consensus Mechanism and Second-Level Confirmation Architecture

The draft EIP-8453 "Decoupled Consensus" proposal completely splits the traditional consensus responsibilities: a rotating fast committee composed of 512 validators is responsible for immediate block production and availability voting; while a post-confirmation engine made up of all validator nodes specializes in providing immutable finality locks.

This mechanism can preliminarily compress the final confirmation time by over four times. In long-term planning, Ethereum's finality is expected to be shortened first to 36 seconds, ultimately aiming for a "North Star goal" of 1-second blocks and 2-second final confirmation, completely matching the settlement experience of centralized high-performance cloud platforms.

Zero-Knowledge Proofs Implementation: Replacing Full Node Re-Execution with Real-Time Validity Proofs

In the dimension of execution layer scalability, Ethereum is firmly transitioning from "global full node re-execution" to "real-time zero-knowledge proof verification."

For a long time, the biggest concern in the industry regarding zkEVM was the computational power consumption and time delay in proof generation. However, in the benchmark test conducted on November 8, three independent prover teams successfully achieved sub-second real-time proof generation standards in environments with 4 to 16 consumer-level GPUs, bringing the proof cost for a single block down to an astonishing $0.003 to $0.007.

With the breakthroughs in computational power and cost bottlenecks, formal security verification (Assurance) has become a new institutional barrier. The Ethereum Foundation plans to achieve a 128-bit provably secure technology standard by early December to ensure that the complex recursive verifier code is absolutely free from logical vulnerabilities. As the future K* fork establishes state proof as a mandatory requirement, Ethereum will officially enter an era of super throughput, evolving towards hundreds of thousands of transactions per second (Gigagas).

Other Key Ecosystem Dynamics During Mumbai Week

During the week-long Mumbai Tech Week, other key tracks within the Ethereum ecosystem also demonstrated vibrant evolutionary trends:

Blob Data Availability: Since the adjustment in January of this year, the blob target capacity has been increased to 14 (maximum 21). In recent months, the actual average usage per block has been about 4.4, and the unit price is far below 1 cent, with the infrastructure's data throughput capability significantly outpacing current ecosystem demands.

Layer 2 Ecosystem Pattern: The long-tracked Layer 2 network L2BEAT has officially been renamed ETHBEAT, with the majority of mainstream Rollup networks now operating steadily in Stage 1 (Base locked value approximately $14 billion, Arbitrum about $9 billion).

Cross-Chain Interoperability: The Ethereum Economic Zone successfully demonstrated atomic-level cross-chain calls between L1 and L2 on the development network, with Gnosis Chain clearly announcing its intention to officially integrate this standard in spring 2027.

Security and Self-Custody Reflection: In response to a severe security incident where Binance's hot wallet suffered targeted penetration, resulting in $6.36 billion in assets being stolen, the on-chain forensic team TRM Labs pointed out that hackers utilized pre-signed EIP-7702 authorizations to batch empty funds. While account abstraction has amplified the execution radius of single operations, the fundamental cause remains the mismanagement of internal signature credentials, not flaws in the protocol design itself.

Future Observation Window and Thoughts

Throughout the entire Mumbai conference, Ethereum demonstrated an extremely clear technical resolve. From the underlying cryptography and consensus mechanism reconstruction to execution layer proofs, Ethereum has fully clarified its technological blueprint for its third decade.

Key future observation windows in the coming months include: the core developer conference ACDC and ACDE scheduled for mid-November, which will formally finalize the repair path for the Glamsterdam vulnerabilities and a new testnet timeline; the Foundation’s formal review of the post-quantum timeline in January next year; and the delivery of the 128-bit zkEVM security milestone by the end of the year.

Ethereum knows how to build an ultimate distributed world computer capable of withstanding quantum attacks and technological upheavals for decades to come. The only and deepest suspense left for the entire industry in Mumbai is whether the core team can truly shoulder the engineering miracle of delivering a hard fork every eight months while maintaining industrial-grade security, atop this increasingly complex giant.