Ethereum co-founder Vitalik Buterin, in a remote keynote speech at ETHShanghai 2026, highlighted the recursive STARK memory pool proposal EIP-8288 as a core topic, stating it aims to alleviate the conflict between quantum-resistant signatures, privacy transactions, and mainnet scalability.

Currently, quantum-resistant signature verification requires about 100,000 to 300,000 gas, while privacy transactions, with careful engineering, require about 300,000 gas. If quantum resistance is added, it could rise to about 10 million gas. He warned that if everyone verifies such objects directly on-chain, the mainnet throughput would drop from about 25 transactions per second to about 0.25 transactions. The proposal is to keep heavy computations in the memory pool: nodes collect dependencies and generate recursive proofs approximately every 500 milliseconds, with each block on-chain verifying only one STARK of about 100 to 300kb, plus about 96 bytes for each statement.

He hopes this draft will enter the I-star fork after Hegota and serve as the next step for Frame Transactions. The effects include reducing the cost of quantum-resistant privacy to tens of thousands of gas, allowing new signatures like Falcon and ML-DSA to not require changes to the Ethereum Virtual Machine, as long as the client first wraps a layer of STARK. Recursive proofs require a unified instruction set, with RISC-V currently preferred, effectively writing a standard ISA into the protocol. The foundation aims for comprehensive quantum resistance readiness by December 2029.

Block time and finality belong to another parallel route. The foundation's technical blueprint from early 2026 proposed gradually reducing block time from 12 seconds and finality from about 16 minutes to seconds-level block time and about 6 to 16 seconds for finality; Vitalik himself has described tiered slots of 8, 6, 4, 3, and even 2 seconds. The speech also mentioned that as proof costs decrease, the interval for layer two to submit to the mainnet is expected to shorten from several minutes to about one minute or less. He used artificial intelligence to illustrate that formal verification is accelerating, allowing more complex cryptographic systems to be machine-checked.

The market mechanism is the repricing of protocol rules. Buyers want quantum resistance and privacy without blocking mainnet applications and layer two, while sellers are clients that can perform aggregated proofs in the memory pool and the proof market. The event-driven aspect comes from the summit speech pushing existing drafts back onto the upgrade agenda. Beneficiaries are STARK provers and the RISC-V toolchain, while those under pressure are old wallets and sorters that still stuff heavy verification into the execution layer. Ethereum will not change block time on this day; instead, it will change what cryptography is written as default in the next one to two years' forks.

Source: Public Information