After reaching outstanding efficiency good points over the previous yr, the Basis has set three important safety milestones that zkEVM groups should meet by the tip of 2026.
Efficiency Targets Achieved, Safety Considerations Emerge
Over the previous yr, zkEVM improvement groups completed spectacular pace enhancements. Proving time for Ethereum blocks dropped from 16 minutes to simply 16 seconds—a 60-fold enchancment. Prices fell by 45 instances, and 99% of Ethereum blocks can now be confirmed in below 10 seconds on course {hardware}.
Nevertheless, these efficiency wins masked a major problem. Many STARK-based zkEVMs depend on mathematical assumptions that haven’t been confirmed. Current analysis revealed that a few of these foundational conjectures had been truly incorrect. Techniques claiming 100-bit safety would possibly truly present solely 80 bits of safety after these mathematical failures.
Supply: @asn_d6
The Ethereum Basis made clear why this issues: “If an attacker can forge a proof, they’ll forge something: mint tokens from nothing, rewrite state, steal funds.” For a system that might safe a whole bunch of billions of {dollars}, safety can’t be negotiable.
Three Vital Milestones for 2026
The Basis established a transparent roadmap with three deadlines all through 2026.
Milestone One arrives on the finish of February 2026. All zkEVM groups should combine their proof techniques with soundcalc, a brand new Ethereum Basis device that measures safety primarily based on present cryptographic analysis. As an alternative of every staff utilizing totally different safety assumptions, soundcalc offers a standard normal that updates as new assaults are found.
Milestone Two, known as “Glamsterdam,” has a deadline of Might 2026. Groups should obtain 100-bit provable safety by soundcalc testing. Ultimate proofs should keep below 600 kilobytes in dimension. Groups additionally want to offer clear documentation explaining how their recursion structure works and why it needs to be safe.
Milestone Three, named “H-star,” represents the ultimate objective by the tip of 2026. This requires full 128-bit provable safety, proof sizes below 300 kilobytes, and formal mathematical arguments proving the recursion structure is sound. This 128-bit normal aligns with suggestions from cryptographic standardization bodies and represents industry-standard safety for techniques dealing with giant quantities of worth.
What Went Fallacious With Present Safety
The safety issues stem from reliance on unproven mathematical conjectures. Many zkEVM techniques used assumptions known as “proximity hole” conjectures of their hash-based SNARK and STARK techniques. These conjectures basically mentioned sure mathematical properties would maintain true below particular circumstances.
Current educational analysis disproved these conjectures, exhibiting they don’t truly work in all of the parameter ranges the place zkEVM groups had been utilizing them. This knocked down the efficient safety stage of techniques relying on these assumptions.
George Kadianakis from the Ethereum Basis’s cryptography staff defined the shift: “A yr in the past, the query was whether or not zkEVMs might show quick sufficient. That query is answered. The brand new query is whether or not they can show soundly sufficient.”
Technical Options Making Progress Doable
The Basis recognized a number of cryptographic advances that make these formidable safety targets achievable.
WHIR represents a brand new Reed-Solomon proximity take a look at and polynomial dedication scheme. At 128-bit safety, WHIR produces proofs about 1.95 instances smaller than older strategies, with verification working a number of instances quicker. It affords clear, post-quantum safety with out requiring trusted setup ceremonies.
JaggedPCS offers strategies for avoiding wasted computational work when encoding information as polynomials. This lets provers create smaller commitments extra effectively.
Effectively-structured recursion topologies permit many smaller proofs to be aggregated right into a single remaining proof. Nevertheless, every zkEVM staff implements recursion in another way with customized code connecting varied circuits. Documenting these architectures and proving they work accurately is important however difficult.
Strategic Timing and Formal Verification
The Basis selected to give attention to safety now for a particular cause. As soon as zkEVM architectures stabilize and groups meet these safety targets, formal verification work can attain its full potential. The Ethereum Basis has been investing in formal verification by tasks like Verified-zkEVM.
“By H-star, we hope the proof system layer may have principally settled,” Kadianakis wrote. “Not frozen eternally, however secure sufficient to formally confirm important parts, finalize safety proofs, and write specs that match deployed code.”
This stability is critical earlier than zkEVMs might be trusted as Layer 1 infrastructure. If these techniques obtain each quick proving and provable 128-bit safety with small proof sizes, Layer 2 rollups might reuse the identical expertise. Ethereum might probably improve gasoline limits with out forcing validators to re-execute each transaction—they’d simply confirm small proofs as an alternative.
Institutional Adoption and Broader Context
Whereas tightening safety necessities, Ethereum has concurrently accelerated institutional outreach. In October 2025, the Basis launched an “Ethereum for Institutions” portal highlighting the community’s 1.1 million validators and decade of steady uptime.
Ethereum presently hosts over 66% of all tokenized real-world property, with main monetary establishments like BlackRock, Securitize, and Ondo Finance deploying tokenized devices on the community. JPMorgan Chase lately launched its first tokenized money-market fund on Ethereum with $100 million in preliminary capital.
The Basis emphasised that privacy-preserving applied sciences together with zero-knowledge proofs, absolutely homomorphic encryption, and trusted execution environments are actually working at manufacturing scale by tasks like Chainlink, RAILGUN, and Aztec Community.
Nevertheless, co-founder Vitalik Buterin additionally recognized protocol complexity as a elementary problem. On December 18, he said: “An essential and underrated type of trustlessness is rising the quantity of people that can truly perceive the entire protocol from high to backside.”
The Highway Forward
Whether or not all main zkEVM groups—together with Polygon, Scroll, zkSync, and others—will efficiently meet these milestones stays unsure. Reaching 128-bit provable safety whereas sustaining proof sizes below 300 kilobytes and protecting prices affordable represents a big problem.
The safety panorama continues evolving. Soundcalc exists as a result of STARK and hash-based SNARK safety parameters maintain altering as researchers uncover new assaults and disprove outdated assumptions. At present’s “100-bit” settings might require revision as cryptographic analysis progresses.
In January 2026, the Ethereum Basis plans to publish further posts formalizing these milestones and detailing particular proof system strategies for reaching the targets. The Ethproofs web site will even replace to spotlight safety alongside efficiency metrics.
The EF cryptography staff will assist zkEVM groups all through this course of, integrating the newest safety analysis into soundcalc because it develops.
From Dash to Marathon
The efficiency dash is over, and the safety race has begun. After a yr targeted on pace, Ethereum’s zkEVM ecosystem now faces the tougher problem of constructing techniques safe sufficient to deal with a whole bunch of billions of {dollars} in worth. The three 2026 milestones present a transparent roadmap, however reaching provable safety at this scale represents uncharted territory for the blockchain {industry}.
Sven Luiv Sven Luiv Read More
