The Zcash development team is planning quantum-resistant signature opcodes built on hash-based signature verification, with integration targeted for January 2027 and no activation date set. Zakura engineer Roman Akhtariev describes the mechanism as preventing an attacker from "deriving private keys from public keys and forging transaction authorizations." The number that explains why this matters: roughly 11.96 million ZEC sit in transparent address pools out of 16.98 million in circulation, about 70% of supply, and transparent addresses are the ones whose public keys are exposed. Shielded balances are a different problem with a different exposure. Worth keeping the urgency honest, though, since no practical quantum attack on mainstream wallet keys has been demonstrated. This is work done ahead of a threat rather than in response to one, which is the only sensible time to do it.