StarkWare published a three-phase quantum-readiness roadmap for Starknet on June 30, claiming it is crypto's "strongest quantum crypto roadmap to date."
Phase 1, estimated at roughly two months, replaces Pedersen hashing with BLAKE2 across state commitments, contract address derivation, and the consensus layer. The OS config hash update is already live on testnet, with mainnet deployment scheduled for early July. New deployments after Phase 1 require no action from users or developers. Post-quantum consensus signatures are also in scope: Falcon-512 has been demonstrated by S2morrow, and OpenZeppelin is developing a Starknet post-quantum account contract.
Phase 2, estimated at about one month after Phase 1, extends quantum resistance to existing on-chain contracts through a migration toolkit that lets contract authors upgrade without breaking interfaces or requiring manual data migration.
Phase 3 depends on Ethereum's own quantum migration. Bridge messaging syscalls that rely on secp256k1 can be removed within about a month of Ethereum's migration. Blob data availability KZG commitment updates must wait for Ethereum's schedule.
Starknet's risk profile differs from many proof-of-work and proof-of-stake chains because STARKs rely on collision-resistant hash functions, not elliptic-curve arithmetic, the part of today's cryptography most exposed to quantum attack. Elliptic-curve SNARKs and the secp256k1 keys used across most L1s face a heavier migration. NEAR put a post-quantum key upgrade to validator vote on June 28, a sign the same security question is spreading across ecosystems.
"This document says: here is how we'll do it for Starknet," CEO Eli Ben-Sasson wrote. "It's our path to making Starknet a safe haven for funds whatever quantum may bring."