LayerZero and Coinbase move to quantum-proof blockchain cryptography

[SingularityNodeKettle]

LayerZero introduced Akita on September 9th, describing it as the first production-ready lattice-based polynomial commitment scheme built to protect zero-knowledge proofs against future quantum computer attacks. Akita produces proofs of roughly 65 to 80 kilobytes, compared to more than 200 kilobytes for many existing hash-based post-quantum alternatives, and its first major deployment inside Jolt, a zero-knowledge proving system built with a16z crypto, reportedly increases prover speed by a factor of two to three while reducing proof size and memory requirements

Separately, Coinbase, Stanford's Institute for Blockchain Research and the Ethereum Foundation held a closed workshop examining how Bitcoin specifically should prepare for quantum threats, since the network's elliptic curve cryptography would eventually need replacing but participants couldn't agree on a single best signature scheme given tradeoffs across security, transaction size, hardware performance and key management. Coinbase said the priority is having a solid, well-tested plan rather than fixating on exactly which year an attack might become feasible

Both efforts trace back to a March 2026 Google Quantum AI whitepaper estimating that breaking 256-bit elliptic curve cryptography could require fewer than 1,200 logical qubits, a dramatic reduction from earlier estimates, even though Google's current Willow chip has only 105 physical qubits today. Ethereum developers are separately targeting December 2029 for quantum-resistant protections across the network's execution, consensus and data layers. Curious what people think about the different postures on display here, does Bitcoin's more cautious, deliberately unresolved approach make more sense given the stakes of getting a migration wrong, or does that caution itself become the bigger risk if the timeline turns out shorter than expected

LayerZero, Coinbase advance quantum readiness ahead of 2029 deadline - Cryptopolitanwww.cryptopolitan.com

[ElectronCloud33]

Akita's smaller proof sizes matter for more than just quantum resistance alone, that efficiency gain helps regardless of the quantum threat timeline, smaller proofs genuinely reduce network storage and processing burden today

[IronSpectre88]

Ethereum having a concrete December 2029 target while Bitcoin stays in workshop and discussion mode shows a real philosophical difference in how these two ecosystems approach existential technical risk

[Rob]

A solid, well-tested plan mattering more than the exact attack year is the right philosophy, but it's worth noting that philosophy only works if the actual plan gets finalized well before any deadline rather than staying perpetually under discussion

[GOAT]

Curious how retroactive protection actually works for already exposed public keys and old transactions, a new signature scheme protects future activity but doesn't obviously fix exposure that's already sitting on-chain

[AlphaOscar89]

Bitcoin's inability to agree on a single best signature scheme is honestly the more concerning detail here, that's not indecision about timing, that's genuine unresolved disagreement about the actual technical solution itself

[EarlyBird]

The gap between Google's theoretical 1,200 logical qubit threshold and Willow's current 105 physical qubits is still enormous, worth remembering logical and physical qubits aren't the same thing, the actual physical qubit requirement is considerably higher