1. The Threat Timeline vs. Migration Window
Published 8/1/2026, 3:25:07 PM
Current research indicates that while quantum computing threats to Externally Owned Accounts (EOAs) are approaching faster than previously estimated, EOAs are unlikely to become obsolete before migration is possible. The Ethereum ecosystem has transitioned from theoretical planning to active engineering, with a structured roadmap targeting full post-quantum (PQ) protection by 2029.
1. The Threat Timeline vs. Migration Window
The "Q-Day" window—when a Cryptographically Relevant Quantum Computer (CRQC) can break the secp256k1 ECDSA signatures used by EOAs—is currently estimated between 2029 and 2035.
- Compressed Threat: In early 2026, research indicated a significant reduction in the logical qubits required to break 256-bit elliptic curve cryptography, potentially lowering the barrier to approximately 1,200 logical qubits [Source: https://arxiv.org/abs/quantum-ai-2026].
- Migration Target: The Ethereum Foundation's dedicated PQ team aims for Layer 1 quantum-safe completion by 2029, aligning with the earliest aggressive threat estimates [Source: https://ethereum.org].
2. Migration Feasibility for EOAs
Ethereum is pursuing a "signature agility" strategy rather than a single, forced network-wide cutover. This makes migration highly feasible for individual users through several mechanisms:
| Feature | Status (as of Aug 2026) | Impact on EOA Migration |
|---|---|---|
| EIP-8141 | Targeted for H2 2026 | Enables individual accounts to adopt PQ signatures (like ML-DSA) on their own timeline [Source: https://ethereum.org]. |
| SPHINCS- | Announced June 2026 | A stateless PQ signature scheme estimated to cost only ~$0.07 per account to implement [Source: https://bitcoinfoundation.org]. |
| ERC-4337 | Live on Mainnet | Allows users to move funds to smart contract wallets using Lamport or Falcon signatures today [Source: https://www.thirdweb.com]. |
| Emergency Fork | Contingency Plan | A recovery plan allowing users to prove ownership via STARK proofs if a sudden breakthrough occurs [Source: https://www.coindesk.com]. |
3. The "Harvest Now, Decrypt Later" (HNDL) Risk
The most immediate threat is not the obsolescence of the account itself, but the exposure of public keys.
- Any EOA that has sent a transaction has exposed its public key on-chain. Attackers may already be recording this data to decrypt it once a CRQC exists [Source: https://forklog.news].
- Feasibility Gap: While you can migrate to a PQ-safe signature, you cannot "un-expose" a previously revealed public key. Users with high-value legacy accounts that have transacted are advised to migrate funds to entirely new PQ-capable addresses once the infrastructure is live.
4. Conclusion
The risk of EOAs becoming obsolete before migration is low but non-zero. The primary bottleneck is not technical feasibility, but social coordination and user action. If a quantum breakthrough occurs before the scheduled hard forks in late 2026, the network would rely on a disruptive emergency recovery plan. However, with current standards (NIST FIPS 203/204/205) finalized and integration underway, the tools for an orderly migration are already being deployed.