Crypto
Vitalik Just Proposed Moving Ethereum's Heaviest Cryptography Into the Memory Pool
The Ethereum cofounder Vitalik Buterin used his online address to ETHShanghai 2026, which kicked off September 22, to sketch the network's answer to two of its hardest problems at once, quantum security and privacy scalability. His topic was EIP 8288, a proposal for recursive STARK memory pools. The core idea is elegant. Take the heaviest cryptographic work off the main chain's critical path and let the network's memory pool nodes do it in parallel.
The cost problem is concrete. Verifying a quantum resistant signature onchain today can consume 100,000 to 300,000 gas. Transactions carrying privacy proofs can burn hundreds of thousands or even millions of gas. As quantum resistant signatures and privacy technology see wider use, that verification burden grows with them. Every unit of that cost lands on users as fees and on the network as congestion.
The proposal separates the execution of signature and proof verification from the onchain process. Memory pool nodes would collect and aggregate the relevant cryptographic objects before transactions are packaged, ultimately producing a single unified proof for the main chain to verify. Users still submit transactions with their signatures and proofs attached. The main chain simply stops processing each heavy object one by one. The result is less onchain data and far less verification overhead.
The payoff compounds in the places Ethereum needs it most. Quantum resistant transactions and privacy transactions get cheaper. Layer 2 networks submitting state proofs to Ethereum could post far more often, with Buterin suggesting intervals could shrink from several minutes to every minute or even less. Developers could also move heavy computation to client side execution and submit only the resulting proofs for onchain verification, opening the door to new computational architectures and external applications. Buterin has said a well engineered private transaction runs about 300,000 gas today, roughly 10 million with quantum safety, and that EIP 8288 could bring both into the low tens of thousands, a cut of more than 99 percent.
Buterin framed the direction as part of a larger architectural shift, with Ethereum evolving from general purpose computing toward specialized modular computing, with new instruction sets like RISC V finding more room to operate. The mechanism remains in the proposal, simulation, and testing stages, so this is a roadmap rather than a release. Roadmaps matter, though, because they tell builders where to invest.
The deeper story is about how Ethereum handles existential technical challenges, treating them as engineering problems with engineering answers. Quantum computing and mainstream privacy are coming on a timescale the network can plan for, and the plan is to make the expensive math cheap through aggregation and parallelism. For users, that means a future where private transactions and quantum safe signatures cost roughly what ordinary transactions cost today. The memory pool, long treated as a waiting room, is becoming a coprocessor. That is the kind of quiet upgrade that keeps a network ahead for a decade.
Quick answers
What is this story about?
The Ethereum cofounder Vitalik Buterin used his online address to ETHShanghai 2026, which kicked off September 22, to sketch the network's answer to two of its hardest problems at once, quantum security and privacy scalability. His topic was EIP 8288, a proposal for recursive STARK memory pools. The core idea is elegant. Take the heaviest cryptographic work off the main chain's critical path and let the network's memory pool nodes do it in parallel.
Why does this story matter?
The deeper story is about how Ethereum handles existential technical challenges, treating them as engineering problems with engineering answers. Quantum computing and mainstream privacy are coming on a timescale the network can plan for, and the plan is to make the expensive math cheap through aggregation and parallelism. For users, that means a future where private transactions and quantum safe signatures cost roughly what ordinary transactions cost today. The memory pool, long treated as a waiting room, is becoming a coprocessor. That is the kind of quiet upgrade that keeps a network ahead for a decade.
Sources
- WEEX: Vitalik on recursive STARK memory pools at ETHShanghai
- Decrypt: Vitalik pushes Ethereum plan to slash quantum safe privacy costs
New to crypto? Read the crypto glossary, browse frequent questions, read our story, or explore the story archive.