TLDR
- Vitalik Buterin is backing EIP-8288 for Ethereum’s next upgrade, called I-Star.
- The proposal uses recursive STARK aggregation to bundle cryptographic proofs together.
- Quantum-safe private transactions could drop from millions of gas to tens of thousands.
- The Ethereum Foundation is targeting full quantum resistance by December 2029.
- EIP-8288 is still a draft and has not been added to Ethereum’s live protocol.
Ethereum co-founder Vitalik Buterin has thrown his support behind a new proposal called EIP-8288. He wants it included in Ethereum’s next major upgrade, known as I-Star.
Buterin shared his support in a post on X. He said he hopes EIP-8288 can be included in I-Star, the fork that follows Hegota.
He described the proposal as the next logical step after Frames, an earlier upgrade concept. The comment gave fresh attention to a proposal that had been sitting in draft form.
The timing lines up with a broader push at the Ethereum Foundation. On September 7, the Foundation said it is aiming for quantum resistance across Ethereum’s execution, consensus, and data layers by December 2029.
The Foundation called this deadline non-negotiable, at least until January 2027. That language signals how seriously the organization is treating the quantum computing threat.
Quantum computers do not exist yet at the scale needed to break current cryptography. But Ethereum developers want protections in place before that changes.
How Recursive STARKs Would Cut Costs
EIP-8288 proposes a system where transactions use lightweight dependency frames. These frames carry information about signatures or proofs instead of the full cryptographic data.
Rather than verifying each cryptographic object one by one on-chain, Ethereum’s mempool could bundle these dependencies into a single recursive STARK. This means one proof would represent many transactions at once.
Buterin argues this could sharply lower the cost of quantum-safe applications. Quantum-safe private transactions, which currently cost around 10 million gas, could potentially fall to the low tens of thousands.
The proposal could also let new signature and proof schemes work on Ethereum without needing separate changes to the Ethereum Virtual Machine for each one. That would make it easier to add new cryptographic tools over time.
Changes to Ethereum’s Mempool
Under the proposed design, mempool nodes would collect transaction dependencies and generate recursive STARK proofs. A block builder would then create one proof that covers every dependency for the transactions included in that block.
The EIP text states that a block would contain a single recursive STARK proving those dependencies exist. This replaces a system where all user-submitted signatures and STARKs are stored directly in the block.
The proposal also outlines dependency data using 96-byte statements. These statements connect to a recursive STARK generated at the block level.
This structure is meant to keep block sizes smaller while still supporting quantum-resistant cryptography. It shifts heavy verification work away from individual transactions.
EIP-8288 remains in draft stage. It has not been implemented in Ethereum’s live protocol, and no date has been set for that to happen.
Its future depends on more research, testing, and whether developers agree to include it in I-Star or a later upgrade. The Ethereum Foundation’s quantum resistance timeline gives the proposal a broader deadline to work toward, but EIP-8288 itself has not been finalized or scheduled.
