The Ethereum Foundation is walking away from Poseidon, a specialized hash function it spent over a year evaluating for base-layer upgrades, after security concerns emerged and traditional alternatives caught up in performance. The shift marks a significant pivot in how the foundation approaches cryptographic infrastructure, prioritizing decades of proven security research over newer, experimental approaches.

Why Did Ethereum Consider Poseidon in the First Place?

Poseidon entered serious consideration in February 2025 when Ethereum co-founder Vitalik Buterin proposed migrating Ethereum's base-layer hashing to the function, citing its dramatically lower constraint counts inside zero-knowledge (ZK) circuits. To explain this in plain terms: ZK proofs are cryptographic tools that allow one party to prove they know something without revealing what it is. Poseidon was designed from the ground up to work efficiently within these proofs, making computations cheaper and faster to verify on-chain.

The hash function itself dates back to 2021 and was co-designed by cryptographer Dmitry Khovratovich. Its core appeal was reducing computational overhead compared to Pedersen hashes, which were the incumbent option in many ZK systems. The Ethereum Foundation took the proposal seriously enough to launch a dedicated Poseidon Cryptanalysis program offering bounties and prizes totaling up to $1 million, with the program set to run through December 2026.

What Security Concerns Emerged?

By August 2026, the Ethereum Research community had grown increasingly vocal about potential weaknesses in Poseidon. Discussions centered on concerns around preimage attacks, which involve finding an input that produces a specific hash output. Researchers also questioned whether certain round configurations were robust enough for a system securing hundreds of billions of dollars in value.

These concerns proved significant enough to shift momentum away from the experimental approach, even though the cryptanalysis program remains active. The foundation's caution reflects the stakes involved: any cryptographic weakness in Ethereum's base layer could have cascading effects across the entire ecosystem.

How Did Traditional Hashes Catch Up?

When Buterin first championed Poseidon in February 2025, the performance gap between algebraic hashes like Poseidon and traditional ones inside ZK circuits was substantial. However, ZK proving systems have improved rapidly over the past 18 months. Several factors contributed to this convergence:

• Proof Generation Optimizations: Developers have refined the algorithms that generate ZK proofs, reducing the computational work required regardless of which hash function is used.
• Hardware Acceleration: Specialized hardware and GPU optimizations now make traditional hash functions run faster in ZK contexts than they did previously.
• Circuit Design Improvements: Engineers have discovered more efficient ways to represent hash operations within ZK circuits, narrowing the performance advantage that Poseidon once held.

These improvements collectively made traditional hashes competitive in modern ZK setups while carrying none of the security question marks that come with a five-year-old algebraic hash.

What Does This Mean for Ethereum's Future?

Sticking with SHA or BLAKE3 carries practical benefits beyond security considerations. These hashes are already widely supported across existing tooling, hardware, and software stacks, reducing integration complexity. Ethereum's long-term roadmap includes preparations for post-quantum security, a concern that becomes more pressing as quantum computing advances. Both SHA-256 and BLAKE3 are considered more straightforward to evaluate in post-quantum security models, partly because their mathematical foundations are better understood by the cryptographic community.

The decision also reflects a broader principle in cryptography: when choosing between a well-understood, battle-tested approach and a newer experimental one, the burden of proof falls on the experimental option. Poseidon had to demonstrate not just theoretical advantages but also practical security guarantees that could withstand intense scrutiny from the research community.

As of August 2026, momentum has clearly shifted toward SHA and BLAKE3 within the Ethereum Research community. However, the $1 million cryptanalysis program will continue running through December 2026, leaving the door slightly ajar for Poseidon if future research resolves the security concerns. For now, Ethereum is betting on the proven track record of traditional cryptography rather than the promise of optimization-focused alternatives.