# Aztec Sets an End-2030 Deadline for Post-Quantum Migration and Commits to Formally Verifying Its Whole Stack

The privacy rollup links the plan to a critical V5 proving flaw that its own AI-assisted audit found, an issue whose exploitation cannot be confirmed or ruled out from the chain's history.

- Published: 2026-10-24T05:47:39.510Z
- Canonical: https://polylog.news/crypto/2026-10-24/aztec-sets-an-end-2030-deadline-for-post-quantum-migration-a
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Aztec Network (Post-Quantum Aztec)](https://aztec.network/blog/post-quantum-aztec), [Aztec Network (Alpha V5 vulnerability)](https://aztec.network/blog/alpha-v5-proving-system-vulnerability), [Aztec Network (Alpha V5)](https://aztec.network/alpha-v5), [KuCoin](https://www.kucoin.com/blog/aztec-post-quantum-roadmap-2030)

Aztec, a privacy-focused layer-2 network on Ethereum, has published a [post-quantum roadmap](https://aztec.network/blog/post-quantum-aztec) that targets full migration by the end of 2030. The [schedule reported by KuCoin](https://www.kucoin.com/blog/aztec-post-quantum-roadmap-2030) runs as follows. Hardened developer libraries come in February 2027. The team will select a post-quantum signature scheme in March, a public-key encryption scheme in July, and a post-quantum proving system in November.

Aztec says its current design already protects past private data against some "harvest now, decrypt later" attacks, where an adversary stores encrypted data today to break it later. The team says full quantum security still requires changes to applications, account authentication, key derivation, validator signatures, zero-knowledge proving and settlement on Ethereum. It also says the whole stack will have to be formally verified because AI now makes finding and exploiting bugs much easier.

The commitment follows a vulnerability Aztec found in its own system. Core contributors [found a critical vulnerability](https://aztec.network/blog/alpha-v5-proving-system-vulnerability) in the [Alpha V5](https://aztec.network/alpha-v5) proving system on July 27 through internal AI-assisted auditing. The flaw could let an attacker build a proof that passes verification for a transaction the network should reject. Aztec said the system does not record which proofs went through the flawed path, so historical activity cannot show whether anyone exploited it. The team is working with operators, application teams and bridge operators to add safeguards around affected flows. The upcoming V6 release includes circuit changes that stop the network from accepting proofs tied to the affected proving system.

## What this means

A soundness bug in a proving system is different from a contract exploit. Validators that only check proofs cannot catch it, and it can leave no forensic trace. Aztec says it cannot rule out exploitation. Its answer has two parts: retire the affected proof path in V6, and formally verify every future component, including new post-quantum primitives that have little production history. The exposed parties are users and bridges holding value on V5, plus any rollup whose safety depends on one proving system without a re-execution fallback. The market already expects quantum-resistance roadmaps. The new element is that a privacy chain is setting the pace of its migration by verification capacity, not by the quantum threat timeline. That makes the 2030 date sensitive to slippage at each selection milestone. The likelier outcome over the next year is that other zero-knowledge rollups announce formal-verification programs and multi-proof designs, and that institutional users treat a published verification scope as a listing condition. The read would be proven wrong if Aztec misses the March 2027 signature-scheme milestone without explanation, which would show the roadmap is aspirational.

## What to watch

- Whether V6 ships with a public audit of the circuit changes that reject V5-era proofs. That would show whether the fix itself was independently checked.
- Which post-quantum signature scheme Aztec selects in March 2027. Its choice will shape signature sizes and proving costs for other privacy systems that follow.
- Whether competing zero-knowledge rollups disclose results from their own AI-assisted audits of their proving systems, which would show whether the V5 flaw is unique or common.