2 hours ago
6
Justin Drake, a researcher at the Ethereum Foundation, wants the crypto industry to start packing for a storm that may not arrive. His proposal is called bunker mode, and it asks holders to move their assets to brand-new addresses before artificial intelligence gets good enough to crack the math that protects them.
The warning landed on X on October 7, 2026, at approximately 14:14 UTC. The timing matters, because Drake suggests the threat to blockchain security could show up within months rather than years.
What Drake is actually worried about
Most blockchains, including Bitcoin and Ethereum, rely on a signature scheme called ECDSA. Think of it as the lock that proves you own your coins without revealing the key that opens it.
The security assumption is simple: deriving a private key from a public key should be computationally impossible. For years, the main villain in that story has been a sufficiently powerful quantum computer, a hypothetical moment the industry calls “qday.”
Drake’s concern is that AI may beat quantum machines to the punch. He pointed to a recent demonstration of mathematical ability by OpenAI, which included a significant disproof of the Erdős unit distance conjecture.
His read is that AI-powered mathematical reasoning could produce a rapid breakdown of ECDSA, potentially arriving in “months not years” before qday. That flips the usual timeline. The industry has been preparing for a slow quantum siege, and Drake is suggesting someone might simply find a side door.
To be clear, Drake framed this as a potential crisis, not a confirmed one. Nobody has announced that ECDSA is broken. The argument is about preparation under uncertainty.
How bunker mode would work
The core idea hinges on a quirk of how addresses work. A public key is typically revealed once an address signs a transaction. An address that has never signed anything keeps its public key hidden.
If an attacker cannot see your public key, they have nothing to run their math against. Drake’s recommendation is to migrate assets to new addresses whose public keys remain undisclosed.
He wants this done in a specific order. Large holders should go first, and the process should be calm and deliberate rather than a stampede.
For what Drake calls load-bearing signers, the parties whose keys secure large amounts of value or critical infrastructure, the advice goes further. He recommends frequent key rotation and the adoption of hash-based multi-signing schemes such as SPHINCS.
Drake also named names. He called on major exchanges and custodians, including Binance, Bitfinex, and Tether, to take the lead in implementing these measures.
On the Bitcoin side, Drake referenced Project11’s “risq list” as an important tool for tracking exposed BTC public keys. He also highlighted that wallets holding under roughly 50 BTC have partial protection from exposure risks.
Not a new idea, just a faster clock
A broader transition toward hash-based cryptography is already part of discussions around Ethereum’s long-term roadmap, and Drake has long argued for moving away from traditional cryptographic assumptions.
Drake indicated that recent progress in AI should accelerate ongoing conversations about crypto security, covering both classical computational threats and quantum computing.
The market, for its part, shrugged. There was no immediate reaction to the warning, with traders and exchanges showing little visible concern.
What this means for holders, exchanges and protocols
For investors, the most immediate takeaway is practical rather than financial. If Drake’s scenario plays out, the coins most at risk would be those sitting in addresses that have already revealed their public keys. Holders who reuse addresses or keep funds in long-active wallets carry more exposure than those using fresh ones.
That makes tools like Project11’s risq list worth watching. Tracking which BTC public keys are already exposed gives the industry a rough map of where vulnerability concentrates, and where migration efforts would matter most.
There are also open questions Drake’s proposal does not settle on its own. Hash-based schemes like SPHINCS come with their own tradeoffs, and getting millions of users to move funds is a coordination challenge that crypto has rarely solved quickly.
Disclosure: This article was edited by Diego Almada Lopez. For more information on how we create and review content, see our Editorial Policy.
English (US) ·