StarkWare, the developer of the Layer‑2 network StarkNet, has unveiled a comprehensive three‑stage roadmap for transitioning to post‑quantum cryptography. The initiative aims to completely eliminate vulnerabilities associated with elliptic curves and to ensure a secure migration for existing smart contracts. According to CEO Eli Ben‑Sasson, the plan will make StarkNet a "safe haven" for funds, regardless of the challenges the quantum era may bring.

The first stage of the roadmap involves replacing the vulnerable Pedersen hashing with the more robust BLAKE2 algorithm in state commitments and contract addresses, as well as introducing post‑quantum consensus signatures such as Falcon‑512. The second phase focuses on building migration tools that will allow legacy applications and wallets to adopt the new standards without breaking compatibility. The third stage will require coordination with Ethereum, as it affects external dependencies like bridge system calls and data availability via blobs.

StarkWare's confidence is rooted in the architectural advantages of the network. First, the STARK proofs that underpin StarkNet already use hash functions and are inherently resistant to quantum attacks. Second, native account abstraction allows cryptographic schemes to be changed at the smart‑contract level without the need for a global network hard fork. As an example, developers point to the launch of the post‑quantum wallet S2morrow in April 2026.

Ben‑Sasson called the belief in the security of classical elliptic curves an "elliptic illusion," stressing that the industry is reacting critically slowly to the threat. Concerns are heightened by a recent Google estimate that lowered the required number of logical qubits to break 256‑bit cryptography to 1,200.

Post‑quantum migration is becoming a new battleground for blockchains. The Ethereum Foundation plans to complete its basic security infrastructure by 2029, while Ripple aims to secure the XRP Ledger by 2028. Meanwhile, experts warn that the majority of the crypto market still relies on classical signature schemes, which theoretically could be broken by Shor's algorithm given sufficient quantum computing power.