StarkWare, the team behind Starknet, unveiled a three-phase roadmap to migrate the L2 network to post-quantum cryptography. The plan calls for replacing remaining dependencies on elliptic curves and providing migration tools for existing contracts.
1/ Starknet is a bet on post-quantum security.
Today, we’re publishing the roadmap to make that bet real.
The goal? An end-to-end post-quantum secure Starknet before Q-day 🧵 pic.twitter.com/92JGLuCk4K
— StarkWare 🥷 (@StarkWareLtd) June 30, 2026
StarkWare called the roadmap “the strongest” in the crypto industry. The team believes the network can be prepared for some quantum threats “within months.” The final phase depends on Ethereum’s post-quantum migration.
“This is our path to making Starknet a safe haven for funds, whatever the quantum era brings,” said CEO Eli Ben-Sasson.
What StarkWare will change
The first phase replaces Pedersen hashing with BLAKE2 in state commitments, contract addresses, and network configuration. StarkWare also plans to introduce post-quantum consensus signatures, including Falcon-512.
Pedersen relies on algebraic structures related to elliptic curves. Such schemes may become vulnerable to a sufficiently powerful quantum computer. BLAKE2 is a hash function: quantum algorithms may weaken its security, but not in the same way as elliptic-curve signatures.
The second phase focuses on migration tools for legacy contracts. The goal is to help existing applications and wallets adopt new cryptographic schemes without a one-time break in compatibility.
The third phase addresses external dependencies on Ethereum. These include bridge system calls and data availability via blobs, according to The Block. Starknet cannot fully upgrade these elements on its own because they depend on the base network’s post-quantum migration.
Why Starknet says it is ready to migrate
StarkWare points to Starknet’s architectural advantage: the network uses STARK proofs built on hash functions. Such proofs are considered post-quantum resistant because they do not rely on elliptic curves. Vulnerable elements remain, including Pedersen hashing and account cryptography.
Another advantage is native account abstraction. In Starknet, signature logic lives at the account smart contract level rather than being hard-coded into the protocol. This lets wallets use different signature schemes without a network-wide hard fork.
In April 2026, Starknet developers launched the S2morrow post-quantum wallet. It uses Falcon-512 instead of standard elliptic-curve signatures.
Ben-Sasson called confidence in the long-term security of elliptic-curve blockchains an “elliptic illusion.” In his view, the industry is preparing for quantum risks too slowly, even though the necessary cryptographic tools already exist. Market participants see the key risk not only in quantum computing, but in its combination with AI.
The risk is critical for the crypto industry. Most blockchains use elliptic-curve cryptography. A sufficiently powerful quantum computer could theoretically derive a private key from a public key and compromise wallets.
In March, Google estimated that cracking 256-bit elliptic-curve cryptography would require about 1,200 logical qubits — significantly below previous calculations. The company plans to transition to post-quantum cryptography by 2029.
Post-quantum migration is becoming a new front of competition among blockchains. In the same month, the Ethereum Foundation unveiled a roadmap to protect the network from quantum computers. The ecosystem is running weekly tests with participation from more than 10 client teams. The base protection infrastructure is expected to be completed by 2029.
In April, Ripple unveiled a post-quantum readiness roadmap for XRP Ledger with a 2028 target date. The platform is testing validators with Project Eleven.
In May, Quantus developers said the crypto industry is not ready to transition to post-quantum cryptography despite progress in such computing. They said most of the market still relies on classical signature schemes — ECDSA and Ed25519. In theory, Shor’s algorithm would allow quantum computers to break such systems once they reach sufficient power.
