Solana co-founder Anatoly Yakovenko told Ethereum Layer 2 users to "abandon all hope" of being quantum-safe over the weekend, citing fresh production hardening on Solana's Falcon-512 verification suite. The dig is more than tribal — the cryptographic argument has merit.
Solana co-founder Anatoly Yakovenko told Ethereum Layer 2 users to "abandon all hope" of being quantum-safe in a tweet on Saturday, May 2, after a developer update demonstrated production hardening on Solana's Falcon-512 verification work. The line was shorter than the argument behind it. Both have legs.
Yakovenko's claim rests on a specific cryptographic fact. Most Ethereum wallets, including those on Layer 2 networks like Arbitrum, Optimism and Base, which now hold over $20 billion in TVL between them, sign transactions using ECDSA on the secp256k1 curve. ECDSA is fast, well-tested, and used by bitcoin too, and it is, in the long run, breakable by a sufficiently large quantum computer running Shor's algorithm. The L2 inheritance problem makes this worse for Ethereum. Rollups settle to L1, which means an L2 cannot become quantum-safe before the base chain does, regardless of what its own validators run.
Solana's two independent client teams, Anza and Jump Crypto, both selected Falcon-512, a lattice-based signature scheme with NIST endorsement, for Solana's post-quantum upgrade path, and both have public code on GitHub. The signature is roughly an order of magnitude larger than ECDSA's, and verification is slower, but the scheme withstands Shor's. Ethereum's research community has flagged the same problem; its planned response, sketched across the Glamsterdam and Heze-Bogota upgrades, targets quantum readiness around 2029.
Yakovenko's "abandon all hope" line was not gratuitous. It was attached to a thread arguing that Ethereum's L2-heavy architecture means the upgrade path has to coordinate across L1 and every major rollup before users meaningfully benefit. The base chain has to ship the new signature scheme, rollups have to update bridge contracts, and existing user wallets have to migrate keys. None of that is impossible — bitcoin will face a similar coordination problem when it tackles its own ECDSA exposure — but the dependency graph is steeper for Ethereum because of the multi-layer architecture it has already shipped.
He went further. Yakovenko also said AI poses a near-term risk that pre-dates the quantum threat. Specifically, he argued that machine-learning systems trained on cryptographic side-channel data could break some post-quantum signature schemes, including, potentially, Falcon and its descendants, before the schemes are properly hardened in production. The claim is contested. Most cryptographers think Falcon-512 holds up against currently public attack methods. But the argument is not fringe. AI-assisted side-channel attacks have made measurable progress in the past 18 months.
Ethereum's developer response has been technical rather than rhetorical. Ethereum Foundation researchers have pointed to Glamsterdam, the next planned hard fork, as the upgrade where post-quantum primitives start being introduced, initially as opt-in account types and later as the default. The 2029 target leaves room for L2s to migrate alongside, but the speed of that migration depends on bridge operators and rollup teams. The Optimism Collective has not published a quantum migration plan, Arbitrum's Stylus team has discussed it informally, and Base, given its parent Coinbase's risk-management posture, is likely to follow Ethereum's L1 timeline rather than lead it.
There is a market subtext. Solana spent most of the past year shipping concrete protocol changes — Firedancer, MEV-aware fee markets, the Falcon work — while Ethereum spent the same period explaining why decentralisation requires rollups. The quantum debate is the latest iteration of that pattern: Solana wraps a real engineering decision in a rhetorical package, and Ethereum responds with a roadmap. The roadmap is more carefully thought through. The package travels further on social media.
That trade-off has cost Ethereum mindshare with the developer cohort that builds at the protocol level. Rollups have absorbed a generation of engineering talent; mainnet research has not. The post-quantum work happening on Solana is being done by both client teams in parallel, on a public timeline, with code reviewers from third parties. Ethereum's equivalent work is fragmented across the Ethereum Foundation, ConsenSys, and several rollup teams that disagree on the migration mechanics. Yakovenko's tweet is, in part, a recruitment ad.
The deeper point is empirical. Quantum computers capable of running Shor's algorithm against secp256k1-sized keys are not imminent. Most public estimates place them five to ten years out, and several large research consortiums think longer. But the migration window for a chain holding hundreds of billions of dollars in user funds has to start before the threat is operational, not after. Ethereum's research community accepts this. The disagreement is about pace, and about who carries the cost of moving first.
Solana's Falcon-512 implementation is in code review by both Anza and Jump Crypto. Glamsterdam is the next planned Ethereum hard fork on the Foundation's published roadmap. The 2029 target stands.