5月区块链技术更新：BTC抗量子计算方案、SOL技术优化、ETH双升级进展GaryMa, Wu BlockchainThe WuBlockchain summarizes key developments in the blockchain technology space for May:BitcoinParadigm researcher Dan Robinson proposed a scheme called PACTs (Provable Address-Control Timestamps).它允许比特币持有者通过区块链时间戳机制生成其对地址的控制证明，而无需转移资产或触发链上活动。 This records ownership before future quantum computing gains the capability to crack private keys, and can be used to claim assets in a subsequent quantum-safe version of the Bitcoin network. The scheme aims to provide a preparation path for long-unmoved addresses to counter potential quantum threats.The Bitcoin Core Project released a high-severity security advisory (CVE-2024–52911), stating that between Bitcoin Core versions 0.14.0 and 29.0, nodes could trigger a memory error when validating specially crafted blocks, leading to a remote crash.公告指出，该漏洞源于交易过程中提前释放缓存数据
验证过程并随后由后台线程访问。如果攻击者能够构造出具有足够算力的区块，则可能会导致节点崩溃，甚至存在远程执行代码的潜在风险。 Galaxy Digital 研究主管 Alex Thorn 表示，比特币社区正在逐步就量子计算威胁达成初步共识。首先，多数人认为中本聪的P2PK地址资产不应该受到干扰，以维护比特币的核心产权属性。同时，由于中本聪的资产分散在大约 22,000 个地址（每个地址 50 BTC）而不是单个巨型“蜜罐”中，因此遭受全面量子计算攻击的实际风险低于预期。第二，
May Blockchain Technology Update: BTC Anti-Quantum Computing Scheme, SOL Technical Optimization, ETH Dual Upgrade Progress
Written by | GaryMa, Wu Blockchain
The WuBlockchain summarizes key developments in the blockchain technology space for May:
Bitcoin
Paradigm researcher Dan Robinson proposed a scheme called PACTs (Provable Address-Control Timestamps). It allows Bitcoin holders to generate proof of their control over an address via a blockchain timestamp mechanism without transferring assets or triggering on-chain activity. This records ownership before future quantum computing gains the capability to crack private keys, and can be used to claim assets in a subsequent quantum-safe version of the Bitcoin network. The scheme aims to provide a preparation path for long-unmoved addresses to counter potential quantum threats.
The Bitcoin Core Project released a high-severity security advisory (CVE-2024–52911), stating that between Bitcoin Core versions 0.14.0 and 29.0, nodes could trigger a memory error when validating specially crafted blocks, leading to a remote crash. The announcement pointed out that the vulnerability stems from cached data being released early during the transaction validation process and subsequently accessed by a background thread. If an attacker can construct a block with sufficient hashing power, it could cause nodes to crash, and there is even a potential risk of remote code execution.
Alex Thorn, Head of Research at Galaxy Digital, stated that the Bitcoin community is gradually reaching a preliminary consensus regarding quantum computing threats. First, the majority view is that Satoshi’s P2PK address assets should not be interfered with, in order to preserve Bitcoin’s core property rights attributes. Meanwhile, because Satoshi’s assets are scattered across approximately 22,000 addresses (50 BTC per address) rather than a single giant “honeypot,” the actual risk of suffering a comprehensive quantum computing attack is lower than expected. Second, the community generally supports developing and testing post-quantum (PQ) cryptography technologies for Bitcoin as a backup plan just in case, provided that the relevant work does not trigger a consensus deadlock or introduce insufficiently tested technical risks.
Ethereum
Glamsterdam Upgrade: Ultimate L1 scaling and MEV fairness. Progress: On the eve of the testnet hard fork, core proposal parameters have been finalized | Activation window: Still anchored for mid-to-late June.
Hegota Upgrade: Censorship resistance, privacy enhancement, and node slimming. Progress: Core features reorganized, framework completely tilted toward “lightweight and censorship resistance” | Expected activation: Late 2026.
Over 100 core Ethereum contributors agreed at the Soldøgn Interop conference to set the Gas Limit floor target to 200 million following the Glamsterdam upgrade. This increase is primarily due to ePBS structural adjustments, Block-level Access List (BAL) optimizations, and EIP-8037 state creation cost repricing. In addition, the conference stably implemented ePBS and completed end-to-end testing on the testnet, while locking in the fixed state byte cost for EIP-8037 and conducting pre-research on features like FOCIL and native account abstraction for the Hegotá upgrade.
In a research article published on May 10, Ethereum co-founder Vitalik Buterin stated that if crypto payments are to achieve mass adoption, they need to transition from “pseudonymity” to “default privacy,” viewing zero-knowledge proof (ZK) payments as the next standard for the global digital economy. Vitalik proposed replacing standard transfers with transactions based on ZK proofs, enabling users to prove payment validity without disclosing their full balance or transaction history. The scheme also involves recursive SNARKs, ZK API usage credits, selective disclosure, and “proof of innocence” mechanisms to support AI agents and users in making private payments while accommodating compliance needs to a certain extent.
The Ethereum Foundation released its Protocol Cluster May 2026 update. Developers advanced testing and preparation for the next upgrade, Glamsterdam, during an interop event in Svalbard, Norway, confirming several key developments. These include establishing a 200 million gas limit floor target, completing multi-client devnet testing for ePBS, finalizing the EIP-8037 state access repricing scheme, and advancing preparation work for FOCIL and native account abstraction (AA) related to the Hegotá upgrade. Concurrently, the Ethereum Foundation Protocol Cluster initiated a leadership transition, with Will Corcoran, Kev Wedderburn, and Fredrik taking over as the new cluster leads. The current focus remains on advancing work related to the Glamsterdam, Hegotá, and Strawmap roadmaps.
According to @hasufl, following the Glamsterdam upgrade, Ethereum’s Gas Limit will be significantly raised from the current 60 million to approximately 200 million. This means L1 execution capacity will achieve a more than 3x increase, with expectations to double further shortly thereafter. Hasufl noted that assuming network demand does not experience an equivalent surge, Ethereum mainnet Gas fees could remain close to zero for the next few years. He explained that this increase benefits from the timely combination of multiple innovations: ePBS provides more time for payloads, BAL allows clients to pre-fetch and execute work in parallel, and Gas repricing ensures the safety of higher limits.
Vitalik Buterin published a post stating that Ethereum is advancing native privacy capabilities through several short-term efforts, including AA + FOCIL, Keyed nonces, and access layer-related improvements. Vitalik noted that AA + FOCIL can provide operations like privacy protocol transactions with stronger in-protocol inclusion guarantees, making them “first-class transactions.” Keyed nonces can offer stronger protocol support for privacy schemes and may serve as an early experiment for Ethereum’s new state expansion strategies. Regarding the access layer, work includes Kohaku, private reads, and other initiatives.
The Ethereum Foundation stated that the Open Intents Framework is designed as a shared infrastructure for cross-chain Intents, providing the ecosystem with a modular open framework to deploy, discover, and execute Intents. Concurrently, LI FI announced the launch of LI FI Intents, a full-stack execution engine for same-chain and cross-chain transfers, which utilizes a professional Solver network to compete for quotes and complete order execution. LI FI documentation shows that its Intent/Solver Marketplace is one of the official foundations of the Open Intents Framework, which the Ethereum Foundation states is entering a phase of scaled adoption.
Facet co-founder Tom Lehman proposed including EIP-8182 in Ethereum’s Hegota upgrade. The proposal intends to introduce native private transfer functionality for ETH and ERC-20 tokens via a protocol-level shielded pool. The scheme adopts a UTXO design with no admin keys, pause mechanisms, or proxy contracts, and allows users to make private transfers directly to existing Ethereum addresses or ENS names. Lehman stated that this move aims to address the issue of insufficient anonymity sets in application-layer privacy solutions, providing a unified privacy pool for wallets and applications.
L2s
Base, the Ethereum Layer 2 network incubated by Coinbase, announced the introduction of zero-knowledge technology provider Succinct’s SP1 zkVM and TEE schemes to enhance the network’s cryptographic security, though it is not transitioning to a full ZK Rollup architecture. Base previously operated based on Optimistic Rollup, allowing users to dispute invalid transactions during a challenge period while assuming transactions are valid by default. Introducing ZK proofs will replace the original multi-day challenge period with cryptographic finality, thereby shortening finality to about 1 day and supporting the flow of funds from Layer 2 back to the Ethereum mainnet under lower trust assumptions.
Layer 2 network Base announced the mainnet launch of the Azul upgrade, introducing a Multiproof mechanism that combines TEE and zero-knowledge proofs (ZK) to enhance network decentralization and shorten withdrawal confirmation times. Base stated that the new client architecture has reduced the number of empty blocks by approximately 99% and supports multiple peak loads of 5,000 TPS. As of the end of May, Base TVL stands at approximately $4.4 billion.
Solana
Solana’s core development team Anza announced that “Alpenglow,” the largest consensus mechanism upgrade in Solana’s history, has officially gone live on the community test cluster. The upgrade is regarded as a major refactoring of the current TowerBFT and Gulf Stream architectures, aiming to significantly reduce network confirmation latency and improve overall performance and stability.
According to disclosures by the Solana Foundation, it has partnered with Google Cloud to launch a payment gateway for AI agents. This allows direct access and payment for APIs via Solana wallets using stablecoins on a per-call basis, without requiring accounts or subscriptions. The system supports integration with Google Cloud services such as Gemini, BigQuery, Vertex AI, and Cloud Run, as well as over 50 third-party APIs, enabling pay-per-use and multi-service selection through a unified API marketplace.
Firedancer, a Solana validator client developed by Jump Crypto, the digital asset arm of high-frequency trading firm Jump Trading, has gone live and begun producing blocks on the Solana mainnet. Ritchie Patel, founding engineer of Firedancer, stated that the client has already packaged tens of millions of transactions in a production environment, but the team will still adopt a gradual rollout and does not want validators to switch on a large scale before safety audits are completely finished. Additionally, Patel noted that the Firedancer architecture draws heavily from traditional finance high-frequency trading systems, and the team recently completed a public security audit competition featuring a $1 million bug bounty pool.
Solana’s core development team Anza stated that Agave 4.0 has been officially recommended for upgrade to mainnet validators. This version focuses on improving network transmission efficiency and block processing capabilities, including reducing Turbine retransmission latency from around 600ms to about 0.8ms after introducing XDP technology, and fully switching to the QUIC transaction transport protocol while removing UDP ingress. Furthermore, the new version optimizes the Replay Stage and adjusts the voting transaction cost model to release more block capacity, paving the way for Solana to advance toward higher throughput and a 100 million CU block target. Officials stated that features such as p-token, Stake Program v5, SBPFv3, and BLS12–381 will also be activated later in this cycle.
BNB Chain
BNB Chain released the “BSC Post-Quantum Cryptography Migration Report,” stating that it has verified the feasibility of post-quantum cryptographic schemes in testing. The scheme replaces transaction signatures with the NIST standard ML-DSA-44 and replaces consensus vote aggregation with pqSTARK, which can maintain compatibility with existing 20-byte addresses, RPCs, SDKs, and wallets. However, testing showed that signature sizes increased from 65 bytes to 2,420 bytes, and under a 2,000 TPS scenario, the block size increased from approximately 130 KB to about 2 MB, while cross-region TPS dropped by about 40%. BNB Chain stated that the network and data layer expansion issues brought about by data bloat remain the primary challenges for production deployment.
BNB Chain launched the “Agent Survival Pack” to drive AI Agents to autonomously pay for model calls and financial service fees on-chain. The initiative integrates six projects: Alt AI, Bankr, Pieverse, WorldClaw, B AI, and AEON, covering infrastructure such as LLM access, Agent wallets, multi-chain payments, stablecoin settlement, and real-world payments. BNB Chain will provide a $5 BNB reward for the first 1,000 wallets of each integrated project, with all transactions and rewards completed on-chain.
Aptos
Aptos stated that it has become the first Layer 1 blockchain to support formal verification for dynamic dispatch, enabling mathematical methods to verify whether the relevant mechanisms operate as designed. Aptos noted that developers can leverage AI to write specifications and use the Move Prover to verify smart contract logic, thereby enhancing the verifiability and security of on-chain programs.
Security Related
According to cybersecurity firm Socket, on May 11, 42 @tanstack/* npm packages (totaling 84 versions) under the open-source tool library TanStack were maliciously compromised by hackers. The affected versions were injected with malicious code designed to steal CI/CD credentials, targeting core environments such as GitHub Actions, AWS, and Kubernetes. Officials advised affected users to rotate relevant credentials immediately. Socket pointed out that this incident is part of an expanding “Mini Shai-Hulud” supply chain attack, and multiple high-profile namespaces, including open-source AI platform Mistral AI and automation software UiPath, have now been confirmed as affected.
SlowMist issued a warning stating that MistEye detected a cross-repository supply chain attack targeting developers. Malicious software packages have been published to npm, PyPI, and Crates.io, involving over 34 malicious packages and 384 related versions, targeting Crypto, DeFi, Solana, Sui/Move, and AI developer communities. Attackers could steal sensitive information such as wallets, SSH keys, and GitHub/AWS Tokens, and achieve persistent control through Git hooks, SSH, systemd, and other methods. SlowMist recommends removing the relevant packages immediately and rotating credentials.
Others
The x402 protocol now supports batch settlement, enabling large volumes of micro-payments as low as under $0.0001 per transaction, making it highly suitable for pay-on-demand instant resources like computation and inference.
Sui blockchain developer Mysten Labs co-founder and Chief Product Officer Adeniyi Abiodun tweeted that Sui will launch confidential transactions this year, with related features involving private payments and scaled payments.
Sui announced the launch of gas-free stablecoin transfer functionality on its mainnet. Officials stated that this is a new protocol-level feature that allows users and businesses to conduct peer-to-peer transfers without paying Gas fees or holding a SUI token balance, meaning supported stablecoin transfer fees on the Sui network are reduced to $0. The feature initially supports stablecoins including USDsui, SuiUSDe, AUSD, FDUSD, USDB, USDC, and USDY, and has received support from Fireblocks.
Delphi Digital released an in-depth research report on Zcash (ZEC), stating that as Bitcoin is gradually absorbed by the traditional financial system and lacks native privacy, Zcash is being repositioned as a complementary asset to Bitcoin in terms of privacy and quantum resistance. The report noted that the proportion of Zcash shielded pool funds relative to circulating supply has risen from about 11% at the beginning of 2025 to approximately 30%, indicating growing demand for privacy use. Meanwhile, Zcash is advancing its anti-quantum roadmap, expecting to achieve protocol-level post-quantum privacy protection through the Tachyon upgrade before the end of 2026, and pushing for quantum-recoverable wallet integration in 2026, with long-term goals to perfect post-quantum soundness.
Privacy blockchain startup AmericanFortress announced the launch of a patent-pending anti-quantum signature scheme, claiming it can protect existing assets on chains like Bitcoin, Ethereum, Solana, and Tron from future quantum computing attacks without requiring large-scale fund migration. The scheme intends to implement a “defensive freeze” on Satoshi Nakamoto-era Pre-BIP32 Bitcoin addresses through a compatible soft fork and zero-knowledge proof mechanisms. This includes the Satoshi wallet holding approximately 1.1 million BTC and about 5 million long-dormant BTC, leaving it to the community to subsequently decide whether to move, burn, or reallocate the relevant assets.
Follow us
Twitter: https://twitter.com/WuBlockchain
Telegram: https://t.me/wublockchainenglish