Ethereum wallets still rely heavily on signatures that a sufficiently capable quantum computer could eventually defeat. A June research proposal called SPHINCS- narrows one part of that problem: whether the EVM can verify a hash-based post-quantum signature at a usable gas cost. Its tests suggest that verification is possible today in Solidity, without waiting for a new precompile or a change to Ethereum consensus.
What the research measured
The proposal is based on SPHINCS+, the family behind the standardized SLH-DSA signature scheme, but it changes parameters to suit blockchain wallets. The authors report roughly 150,000 gas for a standardized-style verifier. Their more aggressive EVM-native variants use Keccak and smaller signature budgets; the lowest reported verification figure in the comparison table is about 127,000 gas.
Those numbers describe signature verification, not a complete wallet migration. A wallet also needs account logic, key enrollment, recovery rules, software support and a safe way to retire vulnerable credentials. Gas prices and the dollar value of gas move independently. The underlying research does not publish the donor headline’s $0.07 figure, so that amount should not be treated as a verified deployment price.
Why smart accounts matter
ERC-4337 gives smart accounts a validation function and routes UserOperations through bundlers and an EntryPoint contract. That architecture lets an account enforce signature rules in contract code rather than accepting only the standard externally owned account flow. In principle, a smart account can require a post-quantum verifier while Ethereum’s base consensus continues to use its current cryptography.
This is a meaningful route for opt-in protection, but it does not silently upgrade every address. Existing externally owned accounts need a migration design. Applications must support the account. Recovery and backup devices must understand the new key scheme. Bundlers and paymasters can improve transaction handling, yet they do not remove the verification cost or guarantee sponsorship.
The trade-offs sit on both sides of the signature
SPHINCS- moves work between the signer and the EVM verifier. Smaller on-chain costs can demand more computation from the device creating the signature. The research reports hardware-wallet signing times ranging from tens of seconds to several minutes for two compact variants, while a laptop-oriented option requires millions of hash calls. Signature sizes are measured in kilobytes rather than the compact form users expect from ECDSA.
The cheapest variants are also non-standard constructions. They replace standard hash components with an EVM-friendly design and reduce how many signatures a key is expected to make. That may be acceptable for a carefully managed wallet key, but it requires review of the chosen parameter set, signature budget and key-rotation policy. The authors present a standardized-style alternative too, at higher signer cost.
A practical readiness checklist
Wallet teams evaluating this approach should separate five questions. First, can the selected verifier reproduce the published gas result? Second, can the intended signing device finish reliably within an acceptable time? Third, how many signatures may one key produce before rotation? Fourth, does recovery avoid falling back to a quantum-vulnerable key? Fifth, can users distinguish enrollment, routine signing and emergency rotation without approving the wrong operation?
The proposal is evidence that post-quantum verification can run on the EVM now. It is not evidence that Ethereum accounts are already quantum-safe, nor that migration has a fixed seven-cent price. The next useful proof is an audited wallet implementation with measured enrollment, signing, recovery and rotation costs under real network conditions.
Adapted from Ethereum Researcher Says Post-Quantum Account Protection Can Be Implemented Today for $0.07.