Vitalik Buterin stated that Ethereum is moving toward what he calls a "cryptography world computer," where significant changes will come to verification, consensus, privacy, and state management after Hegel.
Ethereum may evolve into a cryptographic world computer through proof mechanisms, privacy tools, and decentralized components.
- Hegemony may be the last regular fork before Ethereum's upgrade with recursive STARKs and Lean consensus.
- FOCIL is set to launch on Hegotá, enhancing censorship resistance by further decentralizing access to trading.
- PeerDAS has transformed Ethereum's verification process, allowing nodes to verify by sampling data rather than downloading all of it.
- The Ethereum Foundation currently aims to make the execution layer, consensus layer, and data layer quantum-resistant by December 2029.
In his article "The Cryptographic World Computer" published on September 27, Buterin wrote that Ethereum is approaching a stage where describing it simply as a blockchain is increasingly inadequate.
He expects that the future Ethereum architecture will combine blockchain consensus with zero-knowledge proofs, data sampling, privacy technologies, and decentralized off-chain computation.
"Hegota—the fork planned for next year—is likely to be Ethereum's last 'normal' fork," Buterin wrote, referring to an upgrade whose technology would still be recognizable to developers familiar with Ethereum since 2015.
Hegotá may mark the end of Ethereum's traditional upgrade era
The official Ethereum roadmap currently places Hegoța in 2027, following Glamsterdam in Q4 2026.
The Hegotá upgrade is still in the planning phase, and the full scope has not yet been finalized. Two proposals have currently been scheduled.
FOCIL, also known as EIP-7805, is a key feature of the consensus layer. It enables a committee of validators to create an inclusion list of transactions that block builders must include in blocks.
This mechanism aims to reduce the ability of a single builder to exclude valid transactions. Ethereum's Hegoata roadmap states that this feature can enhance censorship resistance and improve settlement guarantees for Layer 2.
Frame Transactions, also known as EIP-8141, is the second scheduled feature. It enables Ethereum accounts to determine how transactions are authorized, eliminating the requirement for all users to use the same fixed signature structure.
This design natively supports social recovery, spending controls, sponsored gas, and future quantum-resistant signature systems at the protocol level.
Ethereum developers have begun to view Hegotá as part of a longer sequence toward post-quantum infrastructure and consensus reconstruction.
Buterin’s latest article further describes Hegotá as the dividing line between Ethereum’s existing architecture and subsequent cryptographic systems.
Ethereum validation may shift to proof and sampling
One of the most significant changes involves how network participants validate blocks. Traditional blockchain validation requires nodes to download the entire blockchain data and execute transactions themselves. Buterin expects Ethereum to increasingly rely on SNARK validation and PeerDAS data sampling. In his comparison of blockchain designs, he describes this shift as moving from “fully re-downloading and re-computing” to “SNARK validation + PeerDAS for data availability verification.”
PeerDAS has been integrated into Ethereum via Fusaka. This system enables nodes to verify data availability by sampling only a portion of the data set, rather than requiring each node to download every blob. Since then, the Ethereum Foundation has shifted its development focus to the next phase of proof-based verification. As previously reported by crypto.news regarding Ethereum’s Lean rearchitecture, recursive STARKs lie at the core of the plan to reduce redundant execution while maintaining trustless verification.
Buterin described the final verification model more simply as shifting from “download and re-execute” to sampling data and verifying cryptographic proofs. This approach could reduce the hardware requirements for users seeking strong verification guarantees. In his 2030 comparison, he stated that nodes should still obtain consensus and validity guarantees while storing less historical data and performing less redundant computation.
EIP-8288 may aggregate signatures in the mempool.
Buterin specifically mentioned EIP-8288, suggesting it could change how Ethereum processes transactions before blocks are finalized.
EIP-8288 is a proposal currently drafted by Buterin and Thomas Coratger. It introduces a mechanism for aggregating cryptographic signatures and STARK proofs within the mempool. This design extends Frame Transactions and allows transactions to declare cryptographic dependencies.
Mempool nodes can combine many signatures and proofs into a single recursive STARK and pass it to block builders. The builders can then include one aggregated proof instead of processing each large proof individually. This proposal is partially designed around future quantum-resistant signatures, as such signatures may require significantly more data and computation than Ethereum’s current signature system.
EIP-8288 proposes aggregating LeanSPHINCS signatures and LeanSTARK proofs so that these larger cryptographic objects do not incur proportional bandwidth and gas costs when used at scale. This EIP is still in draft status and has not been assigned to any confirmed network upgrade.
Buterin's article presents this as part of a longer-term technical direction: cryptographic work can be completed earlier in the transaction pipeline, including within the mempool. His 2030 model envisions signatures and proofs being processed in parallel before final inclusion in a block.
FOCIL and private mempools may change how transactions are included.
The future transaction path for Ethereum may differ significantly from the familiar process involving users, mempools, miners, and blocks. Buterin describes a model in which transactions first enter a mempool with stronger privacy properties, then flow through FOCIL participants or builders.
The Ethereum Foundation's security roadmap confirms that research around encrypted mempools continues, while development of FOCIL is also progressing. FOCIL is scheduled to be launched in Hegotá.
Under this proposal, multiple validators can submit lists of transactions that should appear in a block. Builders cannot independently ignore qualifying transactions from these lists without adhering to protocol rules. Buterin expects network privacy to advance in tandem.
His 2030 comparison also includes network privacy methods such as Tor and coin mixing networks, as well as zero-knowledge proofs for transaction and account privacy. Crypto.news reported in August that, as cryptographic tools mature, Buterin has elevated the priority of privacy and quantum security in Ethereum’s roadmap.
The Lean consensus aims for faster and simpler finality.
Consensus itself is also expected to evolve. Ethereum currently uses proof-of-stake, with finality typically achieved after multiple epochs. Researchers are working toward more streamlined consensus models to achieve finality faster.
The Ethereum Security Roadmap states that initial research around single-slot finality evolved into triple-slot finality and is now being advanced through Minimmit—a single-round consensus design under the Lean Ethereum initiative.
Finality in seconds remains a long-term research goal around 2029, but no specific upgrade has been designated to deploy the final design. Buterin’s 2030 estimate suggests slot durations of approximately 4 to 8 seconds and finality of about 8 to 32 seconds. The current Ethereum roadmap notes that these plans are still research goals and may change.
In July, crypto.news described the Lean Ethereum initiative as the largest technical overhaul of the network since The Merge, with new consensus, proof, storage, and privacy mechanisms set to be rolled out gradually over the coming years.
Ethereum aims to achieve quantum resistance by December 2029.
Quantum resistance has become one of Ethereum’s most clearly timed long-term goals. On September 7, the Ethereum Foundation’s Protocol Cluster stated the aim is to make the execution layer, consensus layer, and data layer all quantum-resistant by December 2029.
The foundation stated that this date was intentionally set aggressively. Its planning assumes that quantum machines with cryptographic capabilities could emerge as early as 2030, while also acknowledging that most estimates suggest this will occur later.
Ethereum is researching cryptographic schemes to replace those vulnerable to sufficiently powerful quantum computers. The review includes BLS validator signatures, ECDSA account signatures, KZG commitments for data availability, and certain zero-knowledge proof systems.
Frame Transactions may assist accounts by allowing wallets to choose quantum-resistant verification methods, without requiring all accounts to migrate through the same protocol-level mechanism. EIP-8288 may also reduce the cost of aggregating certain larger post-quantum signatures.
As crypto.news noted in its quantum roadmap analysis, recursive STARK aggregation and hash-based signatures form part of Ethereum’s strategy to address future quantum attacks. Buterin expects that, following Hegoata, recursive STARKs, formal verification, and post-quantum cryptography will become increasingly central.
Ethereum may rely more on decentralized off-chain components.
Buterin’s concept of a “world computer” does not mean that Ethereum will move everything onto Layer 1. Instead, his article describes an architecture in which the blockchain focuses on data and state changes that require ordering, while other tasks are performed in parallel outside the main execution path. “Structured computation allows blockchains to focus more efficiently on their core work,” he wrote.
Under this model, signatures and proofs can be aggregated before entering a block, historical data can be distributed among participants, and specialized computations can occur outside the base execution layer.
Subsequently, the network cryptographically verifies the result. Buterin believes that modern proof systems enable Ethereum to distribute computation without requiring each participant to trust the entity performing the work. His long-term architecture includes distributed history and state storage, proof-based verification, parallel computation, and a decentralized system positioned between users and Ethereum.
More speculative technologies appear further in the future. Buterin stated that indistinguishability obfuscation (iO) could eventually enable general cryptographic computations involving multiple asynchronous participants. He described it as a possible subsequent development, not a required technology for implementing the architecture outlined in the article.
Ethereum's next scheduled milestone is still Glamsterdam, with Hegotá planned for release in 2027. Crypto.news previously reported on the testing risks associated with Glamsterdam, as developers were preparing for the next phase of testing for this upgrade.
The features currently scheduled for Hegotá include FOCIL and Frame Transactions, with additional proposals still under research, testing, and governance review on Ethereum.