eip-8288

Paranoid developer Ignotus Nemo proposed a recursive aggregation scheme for EIP-8288 on the Ethereum research forum, suggesting support for various approved proof sizes to allow smaller proofs for small-scale aggregation. He implemented heterogeneous recursion in the Paranoid system, which has been running both large and small state transition proofs on the public mainnet.The scheme uses a limited set of authenticated validator libraries, processing cross-class delayed validation through independent accumulator channels for each class to ensure the correctness of matrix claims in the recursive steps. When applying this mechanism to EIP-8288, discussions are needed on how to merge subclass libraries, handle dependencies, and address semantic compatibility issues between program identities and validator classes. EIP-8288 was proposed by Vitalik Buterin and Thomas Coratger in June 2026, primarily addressing the issues of large post-quantum signatures and STARK proof sizes, as well as high on-chain verification costs.

Vitalik Buterin (@VitalikButerin) posted that the ideal path for supporting various cryptographic algorithms is through EIP-8288: users generate arbitrary signatures locally, then prove them through STARK, and aggregate them on-chain via STARK, without occupying calldata on-chain, thus Ethereum does not need to add new precompiles. He also mentioned that if lattice cryptography is proven to have security against AI attacks, it can still be used in scenarios such as accounts and wallets through precompiles in the future.Previously, Starknet co-founder Eli Ben-Sasson expressed disagreement with a16z's related views, stating that lattice cryptography has a rich mathematical structure that is vulnerable to AI attacks, and that a simplified version based on modular SIS only appeared in 2012 and lacks maturity. He suggested waiting another 3-5 years until AI has been thoroughly tested before using it for custody of large assets.

Vitalik posted on the X platform, expressing the hope to include the recursive STARK memory pool proposal EIP-8288 in the Ethereum I-star upgrade, stating that it can be seen as the next step after Frames.This proposal allows quantum-safe signature data to be placed off-chain, reducing the cost of signatures; the fuel cost for quantum-safe privacy transactions is also expected to drop from about 10 million to tens of thousands. The proposal relies on frames and recursive STARK aggregated transaction dependencies, with nodes sending a STARK of about 100 to 300KB each time period; the on-chain overhead is one STARK and 96 bytes for each statement to be proven.