Ethereum abandons its 8-year cryptography bet after proof systems flip the tradeoff

Faster binary-field proofs are making SHA and BLAKE practical for a future Ethereum without declaring Poseidon broken.

Ethereum sits at a rail junction leaving the cracked Poseidon route for faster SHA-256 and BLAKE paths powered by SNARK advances.
Image by CryptoSlate
2 min read

Quick Take

  1. Ethereum Foundation is shifting future L1 design toward SHA or BLAKE instead of Poseidon.
  2. New binary-field proof systems make SHA and BLAKE practical, reversing the old proving advantage Poseidon had.
  3. Drake said Poseidon is not broken, and Ethereum has issued no migration order or deployed fork.

Ethereum researcher Justin Drake said on Aug. 13 that the Ethereum Foundation is abandoning Poseidon for future layer-1 (L1) designs and pivoting toward SHA or BLAKE hashes after eight years of work on specialized, proof-friendly cryptography.

Drake reported no break in Poseidon and issued no migration order, noting that recent gains in proof systems changed the performance tradeoff that had favored the hash.

SNARKs produce compact proofs that a computation was performed correctly. Many use arithmetic over large prime fields, where the bitwise operations behind conventional hashes such as SHA-256 and Keccak historically imposed a high proving cost. Poseidon was designed to lower that cost by fitting the proof system's preferred math.

Ethereum considers Poseidon hash to boost zero-knowledge proof efficiency
Related Reading

Ethereum considers Poseidon hash to boost zero-knowledge proof efficiency

Poseidon promises reduced computational costs for Ethereum's rollups but faces skepticism over performance.
Feb 26, 2025 · Oluwapelumi Adejumo

Binary-field proofs raise hash throughput

Binius research binary-field construction works naturally with 0s and 1s, closely matching Keccak's bitwise operations. The Flock paper, posted July 29, applies newer techniques to large batches of standard hash computations.

Flock's authors report that one M4 Max core can prove about 82,000 BLAKE3 compression evaluations, 42,000 SHA-256 compressions, and 30,000 Keccak permutations per second. Ten cores exceeded 660,000 BLAKE3 compressions per second, and SHA-256 proving ran more than nine times faster than Binius64 in the paper's comparison.

The proof-of-concept benchmark counts internal hash operations, while Ethereum transaction capacity and production throughput use different measurements.

Infographic showing Ethereum's shift from Poseidon-friendly SNARK design to binary-field proofs for SHA-256, Keccak and BLAKE3, with Flock benchmark results and post-quantum implications.
Infographic compares Ethereum’s hash-to-SNARK reversal, Flock benchmarks, and post-quantum implications using Poseidon, SHA-256, Keccak, BLAKE3, and leanXMSS.

Drake described the advance as a reversal in cryptographic design: researchers have built hash-friendly SNARKs, reducing the need for SNARK-friendly hashes. Conventional hashes can enter Ethereum's design process without carrying their former proving penalty.

SHA-256 is part of NIST's Secure Hash Standard. BLAKE2 has had a public informational specification since 2015, separating it from the newer BLAKE3 implementation benchmarked by Flock.

CryptoSlate Daily Brief

Daily signals, zero noise.

Market-moving headlines and context delivered every morning in one tight read.

5-minute digest 100k+ readers

Free. No spam. Unsubscribe any time.

You’re subscribed. Welcome aboard.

Years of public analysis give cryptanalysts more time to test its design, and faster proofs now let Ethereum weigh that history without choosing a younger primitive mainly for proving speed.

Ethereum's security roadmap separately identifies protocol simplification as a way to shrink the network's attack surface.

Justin Drake reveals 10-year ‘Lean Ethereum' roadmap to achieve 10k TPS on mainnet
Related Reading

Justin Drake reveals 10-year ‘Lean Ethereum' roadmap to achieve 10k TPS on mainnet

Ethereum researcher Justin Drake sketched a post-quantum, high-throughput roadmap for the next decade a day after Ethereum's 10th anniversary.
Jul 31, 2025 · Gino Matos

Ethereum plans to replace validator BLS signatures with hash-based leanXMSS signatures, then use leanVM to aggregate their much larger data into compact proofs. Cheap proofs of conventional hashes would remove one obstacle from that architecture.

Drake's personal strawmap places production-grade leanVM around 2027 and deployments across the consensus, data and execution layers in 2028. Ethereum's official post-quantum roadmap gives a nonbinding target of about 2029 for core infrastructure and extends full execution-layer migration beyond that point.

As quantum ‘Q-Day' jumps to 2029, Ethereum faces a new fight over what to do with coins left in old wallets
Related Reading

As quantum ‘Q-Day' jumps to 2029, Ethereum faces a new fight over what to do with coins left in old wallets

The Ethereum Foundation’s post-quantum roadmap argues that the real danger is a years-long struggle over how to move user wallets.
Mar 26, 2026 · Gino Matos

Ethereum's roadmap tells users to leave their wallets unchanged for now, while Drake's announcement calls for no changes to existing rollups or zkVMs and describes no deployed fork. The decision concerns which hash foundations Ethereum may use in a future proof-driven L1.

$1,877.91 -0.37% 24 hour change
1H +0.03% 24H -0.37% 7D -1.88%
30D -2.19% 60D +5.21% 90D -13.91%

Ethereum is -0.37% over the past 24 hours and currently sits at rank #2 by market cap.

Market cap $226.63B
Volume (24h) $5.64B -19.85%
Circ. supply 120.68M
FDV $226.63B
Crypto Market Summary

Where the broader market sits right now

Right now, the total crypto market is valued at $2.16T with $48.44B in 24-hour volume. Bitcoin dominance sits at 58.36%. Explore the market

Global market cap $2.16T
24H market volume $48.44B
Bitcoin dominance 58.36%