Ethereum Foundation researcher Justin Drake announced that leanVM, a minimal zkVM, has achieved end-to-end formal verification. Drake also set a revised December 2028 target for Ethereum's full transition to post-quantum security.
Ethereum Foundation researcher Justin Drake announced on November 3, 2026 that leanVM has achieved end-to-end formal verification. The tool is designed to make post-quantum signatures practical at network scale, as part of an effort to harden Ethereum against quantum threats across all three layers of the protocol.
What leanVM does
leanVM is a minimal zkVM, a stripped-down virtual machine built around zero-knowledge proofs. Its job is narrow: it aggregates hash-based post-quantum signatures, bundling many signatures into a compact proof instead of verifying each one separately.
On performance, leanVM can handle over 1,000 leanXMSS aggregations per second. leanXMSS is the hash-based signature scheme Ethereum plans to use in place of BLS at the consensus layer. Ethereum validators rely on BLS signatures today to attest to the state of the chain.
Formal verification uses mathematical proof to show software behaves as its specification says it should. Getting that proof end to end means the guarantee covers the whole tool, not just selected components.
A new deadline for the roadmap
The verification news arrived alongside a schedule update. At Devcon 8 in Mumbai, Drake set a revised target of December 2028 for Ethereum's full transition to post-quantum security. The updated timeline is meant to leave room for the network forks the transition will require following an earlier milestone.
The broader plan rests on three open-source projects: leanVM, leanXMSS and leanSpec. The Ethereum Foundation is also running formal verification processes and using incentives such as the Poseidon Prize to encourage innovation.
Formal verification proves code matches its specification, so the quality of leanSpec and the underlying design choices remain critical. And the December 2028 date is a target, not a promise.
Source: Crypto Briefing
Trading involves risk.
Risk Disclaimer
