StarkWare Cuts Falcon-512 Verification Cost to 24.2 Million Gas

StarkWare says Falcon-512 signature verification on Starknet now costs 24.2 million gas — half the original 48.4 million-gas benchmark the effort started from. The company disclosed the figure in an announcement describing progress on post-quantum cryptography for the Ethereum layer-2 network.

The number deserves careful reading. It covers verification alone. It is not the fee for a complete account transaction. Starknet users invoke account contracts that bundle signature checks with other logic, so the real cost of a transaction will differ from the verification figure on its own.

There is a second nuance. The 48.4 million-gas figure was the challenge's starting benchmark. It was not the measurement taken immediately before this upgrade. In other words, the halving compares today's result against where the effort began, not against its most recent state.

What is Falcon-512 and why does it matter?

Falcon-512 is a post-quantum signature scheme. That means it is designed to resist attacks from quantum computers, which theoretical research suggests could break the elliptic-curve cryptography securing most blockchains today. If large-scale quantum machines arrive, signatures like ECDSA would become forgeable. Post-quantum schemes are the industry's insurance policy against that scenario.

The catch has always been cost. Post-quantum signatures tend to be larger and slower to verify than the classical alternatives. On a gas-metered network, that translates directly into higher fees. Every reduction in verification gas widens the set of applications where quantum-resistant signatures are practical rather than prohibitive.

A 24.2 million-gas verification is still heavy by everyday Starknet standards. But the trajectory matters more than the absolute number for teams watching this space.

How Starknet handles signatures differently

Starknet takes an architectural route that few chains do. Signature checks do not live in a global network rule. They run inside account contracts, one per user.

That design has a concrete consequence: individual accounts can adopt different verification methods without a network-wide fork. If one account wants Falcon-512 and another wants a different scheme, both can coexist. No coordinated upgrade is needed to roll out a new signature type.

This is the mechanism that makes a rollout like this possible at all. On chains where verification is baked into the protocol, adding a post-quantum scheme would require a hard fork and consensus across validators. On Starknet, it is an account-level choice.

What does this change for users and developers?

In the near term, not much for the average user. The figure marks progress on an optimization effort, not a switch in default account behavior. Standard accounts continue to operate as before.

For developers building long-lived infrastructure — vaults, treasuries, institutional custody — the news is more relevant. Those use cases care about signatures that hold up over decades, and quantum resistance is part of that calculus. Cheaper verification widens the design space for such products.

The gap between 24.2 million gas and practical, everyday affordability also signals where the work goes next. If StarkWare and the broader post-quantum effort continue shaving verification costs, the point at which quantum-resistant accounts become a default rather than a specialty option moves closer.

No further benchmark target has been announced alongside the figure. Watch for subsequent updates from StarkWare on whether verification costs keep falling toward levels that would let Falcon-512 move beyond specialized accounts.