Ethereum has begun moving toward what Vitalik Buterin calls a “cryptographic world computer,” with major changes planned to verification, consensus, privacy and state management after Hegotá.
Summary
- Ethereum could evolve into a cryptographic world computer using proofs, privacy tools and decentralized components.
- Hegotá may become Ethereum’s last conventional fork before recursive STARKs and Lean consensus reshape upgrades.
- FOCIL is scheduled for Hegotá to strengthen censorship resistance by distributing transaction inclusion authority further.
- PeerDAS has already changed Ethereum verification by letting nodes sample data instead of downloading everything.
- Ethereum Foundation targets quantum-resistant execution, consensus and data layers by December 2029 under current plans.
Buterin wrote in his Sept. 27 essay, The Cryptographic World Computer, that Ethereum is approaching a point where describing it simply as a blockchain becomes increasingly incomplete.
He expects future Ethereum architecture to combine blockchain consensus with zero-knowledge proofs, data sampling, privacy technology and decentralized off-chain computation.
“Hegota — the fork planned for next year — is likely to be Ethereum’s last ‘normal’ fork,” Buterin wrote, referring to an upgrade whose technology would remain recognizable to developers familiar with Ethereum in 2015.
Hegotá could close Ethereum’s conventional upgrade era
Ethereum’s official roadmap currently places Hegotá in 2027, following Glamsterdam in the fourth quarter of 2026.
The Hegotá upgrade remains in planning, and its complete scope has not been finalized. Two proposals are already scheduled.
FOCIL, or EIP-7805, is the consensus-layer headliner. It lets a committee of validators create inclusion lists containing transactions that block builders must include.
The mechanism is designed to reduce the ability of a single builder to exclude valid transactions. Ethereum’s Hegotá roadmap says the feature can strengthen censorship resistance and improve Layer 2 settlement guarantees.
Frame Transactions, or EIP-8141, is the second scheduled feature. It lets Ethereum accounts decide how their transactions are authorized instead of requiring the same fixed signature structure for every user.
The design can support social recovery, spending controls, sponsored gas and future quantum-resistant signature systems directly at the protocol level.
Ethereum developers have begun treating Hegotá as part of a longer sequence leading toward post-quantum infrastructure and redesigned consensus.
Buterin’s latest essay goes further by describing Hegotá as a dividing line between Ethereum’s existing architecture and the cryptographic systems expected to follow.
Ethereum verification could move toward proofs and sampling
One of the largest changes concerns how network participants verify blocks. Traditional blockchain verification requires nodes to download blockchain data and execute transactions themselves. Buterin expects Ethereum to rely increasingly on SNARK verification and PeerDAS data sampling. His comparison of blockchain designs describes the transition as moving from “full re-download and recompute” toward “SNARK verification + PeerDAS for data availability.”
PeerDAS has already entered Ethereum through Fusaka. The system lets nodes verify data availability by sampling parts of the dataset instead of requiring each node to download every blob. The Ethereum Foundation has since moved its development focus toward the next stages of proof-based verification. As crypto.news previously reported on Ethereum’s Lean rebuild, recursive STARKs sit at the center of plans to reduce repeated execution while keeping verification trustless.
Buterin describes the eventual verification model more simply as a move from “download and re-execute” toward sampling data and verifying cryptographic proofs. The approach could reduce the hardware requirements for users seeking strong verification guarantees. His 2030 comparison says nodes should still obtain consensus and validity guarantees while storing less history and performing less redundant computation.
EIP-8288 could aggregate signatures inside the mempool
Buterin specifically mentioned EIP-8288 among the technologies that could change how Ethereum processes transactions before they enter blocks.
EIP-8288 is currently a draft proposal authored by Buterin and Thomas Coratger. It introduces in-mempool aggregation for cryptographic signatures and STARK proofs. The design extends Frame Transactions and lets transactions declare cryptographic dependencies.
Mempool nodes could combine many signatures and proofs into a single recursive STARK before passing them onward to block builders. The builder could then include an aggregated proof instead of processing every large proof independently. The proposal is designed partly around future quantum-resistant signatures, which can require considerably more data and computation than Ethereum’s current signature system.
EIP-8288 proposes aggregating LeanSPHINCS signatures and LeanSTARK proofs so that these larger cryptographic objects do not create the same level of bandwidth and gas overhead when used at scale. The EIP remains in draft status and has not been assigned to a confirmed network upgrade.
Buterin’s essay presents it as part of a longer technical direction where cryptographic work can happen earlier in the transaction pipeline, including inside the mempool. His 2030 model envisions signatures and proofs being processed in parallel before final block inclusion.
FOCIL and private mempools could change transaction inclusion
Ethereum’s future transaction journey could look very different from the familiar sequence of user, mempool, miner and block. Buterin describes a model where transactions enter a mempool with stronger privacy properties before moving through FOCIL participants or builders.
The Ethereum Foundation’s security roadmap confirms that research into encrypted mempools remains active alongside FOCIL development. FOCIL is already scheduled for Hegotá.
Under the proposal, multiple validators can submit lists of transactions that should appear in a block. A builder cannot independently ignore eligible transactions appearing on those lists without violating protocol rules. Buterin expects network privacy to develop in parallel.
His 2030 comparison includes onion routing, mixnets and other network privacy methods alongside zero-knowledge proofs for transaction and account privacy. As crypto.news reported in August, Buterin has moved privacy and quantum security higher in Ethereum’s roadmap as cryptographic tools mature.
Lean consensus targets faster and simpler finality
Consensus itself is expected to change. Ethereum currently uses proof-of-stake with finality occurring over several epochs. Researchers are working toward a more streamlined consensus model capable of reaching finality much faster.
Ethereum’s security roadmap says research that began around single-slot finality later developed into three-slot finality and is now progressing through Minimmit, a one-round consensus design under the Lean Ethereum program.
Finality measured in seconds remains a long-range research target around 2029, but no specific upgrade has yet been assigned to deploy the final design. Buterin’s 2030 comparison estimates slots of roughly four to eight seconds and finality around eight to 32 seconds. The current Ethereum roadmap cautions that these plans remain research goals and may change.
Crypto.news described the Lean Ethereum program in July as the network’s largest technical overhaul since The Merge, with new consensus, proof systems, storage and privacy mechanisms planned over several years.
Ethereum targets quantum resistance by December 2029
Quantum security has become one of Ethereum’s most clearly dated long-term targets. The Ethereum Foundation Protocol Cluster said on Sept. 7 that it is targeting quantum resistance across the execution, consensus and data layers by December 2029.
The Foundation describes the date as deliberately aggressive. Its planning assumes that cryptographically relevant quantum machines could appear as early as 2030, while acknowledging most estimates put that possibility later.
Ethereum is working on replacing cryptography vulnerable to sufficiently powerful quantum computers. Areas under review include BLS validator signatures, ECDSA account signatures, KZG commitments used in data availability and some zero-knowledge proof systems.
Frame Transactions could help with the account side by allowing wallets to choose quantum-resistant verification methods without requiring every account to migrate through the same protocol-level mechanism. EIP-8288 could reduce the cost of aggregating some of those larger post-quantum signatures.
As crypto.news reported in its quantum roadmap analysis, recursive STARK aggregation and hash-based signatures form part of Ethereum’s proposed defense against future quantum attacks. Buterin expects recursive STARKs, formal verification and quantum-resistant cryptography to become increasingly central after Hegotá.
Ethereum could rely more on decentralized off-chain components
Buterin’s “world computer” description does not mean Ethereum would move everything onto Layer 1. His essay instead describes an architecture where the blockchain focuses on data and state changes that require ordering, while other work happens in parallel outside the main execution path. “Structuring computation lets the blockchain more effectively focus on its job,” he wrote.
Under that model, signatures and proofs could be aggregated before entering a block, historical data could be distributed between participants and specialized computation could happen outside the base execution layer.
The network would then verify the output cryptographically. Buterin argues that modern proof systems allow Ethereum to distribute computation without requiring every participant to trust whoever performed each piece of work. His longer-term architecture includes distributed history and state storage, proof-based verification, parallel computation and decentralized systems sitting between users and Ethereum itself.
A more speculative technology appears further out. Buterin said indistinguishability obfuscation, or iO, could eventually allow generalized encrypted computation involving many asynchronous participants. He described it as a possible later development, not a technology required for the architecture outlined in his post.
Ethereum’s next scheduled milestone remains Glamsterdam, with Hegotá planned to follow in 2027. Crypto.news reported on Glamsterdam testing risks as developers prepared the upgrade for its next test phases.
Hegotá’s scheduled features currently include FOCIL and Frame Transactions, while additional proposals continue through Ethereum’s research, testing and governance process.