Justin Drake tells large crypto holders to move to fresh addresses before AI can break ECDSA
Ethereum Foundation researcher Justin Drake says AI could break ECDSA in "months not years" and wants large holders on fresh addresses now. Custodians would bear most of the cost, and his evidence is a single AI math result.
The Investor · Invest desk

What happened
- He called on Binance, Bitfinex and Tether to lead, with large holders moving first in a calm, deliberate order.
- For signers securing large value or critical infrastructure, he recommended frequent key rotation and hash-based multi-signing schemes such as SPHINCS.
- On bitcoin, he pointed to Project11's risq list for tracking exposed public keys and said wallets under roughly 50 BTC have partial protection.
- Traders and exchanges showed little visible concern after the October 7 post on X, according to Crypto Briefing.
Why it matters
- What it costs cost Frequent key rotation is a recurring operating expense for custodians, unlike a one-time address move, and it is being requested against a threat no one has demonstrated.
- Who's exposed exposure Coins in reused or long-active addresses, whose public keys are already on-chain, are the ones a break would reach first.
- Who has to decide decision The named exchanges now have to choose between spending on migration now and staying on the quantum timetable the industry had been planning around.
Next story · Science · Oct 8
Vitalik Buterin warns AI mathematics could weaken lattice cryptography within two yearsConfirmed4 publishers
Drake's case for a short clock rests on one exhibit. He cited OpenAI's recent mathematical work, including a disproof of the Erdos unit distance conjecture [4]. From it he said AI-powered reasoning could break ECDSA "months not years" before qday, the industry's name for the arrival of a quantum computer strong enough to do it [15][7]. The exhibit is a result on a different problem. Drake framed the outcome as a potential crisis, and no one has announced that ECDSA is broken [5].
On the day, the market priced the warning at roughly zero, judging by the lack of any immediate reaction reported by Crypto Briefing [16]. Whether that is the right value depends on the odds of a break within months, and the account of Drake's post does not include an estimate of them.
The cost of acting is uneven. A holder whose coins already sit in an address that has never signed pays nothing extra, because the public key an attacker would need is not visible [2]. Exposure concentrates in reused addresses and long-active wallets [14], and in custodians, whom Drake wants rotating keys frequently and moving to hash-based multi-signing such as SPHINCS [11]. A migration is one transaction. Frequent rotation is a standing line in an operations budget, paid every period whether or not the attack comes.
If no AI result against ECDSA arrives, early movers have paid early for work the quantum transition needs anyway. Hash-based cryptography is already part of Ethereum's long-term roadmap discussions, and Drake has argued for years for moving off traditional cryptographic assumptions [10]. If a break lands inside his window, the losses fall on coins whose public keys are already on-chain [14]. In the slower version, AI progress shortens the timetable for classical and quantum attacks alike, both of which Drake said recent AI gains should push the industry to discuss faster [13], and there is no single day on which anything breaks.
I think the market's zero is defensible on the evidence Drake cited, and the individual move is cheap enough to make anyway. The open question is whether custodians will take on a recurring cost on the strength of one demonstration. The counter-case is that the first public sign of an AI break could be a theft instead of a paper. By then the calm, ordered migration Drake asked for, largest holders first [3], is no longer on offer.
A published AI-assisted method that cuts the work of deriving a private key from a public key, the assumption ECDSA rests on [7], would show the market wrong. Binance, Bitfinex or Tether starting the migration Drake asked them to lead [12] would show it changing its mind.
What to watch
- Whether Drake or another Ethereum Foundation researcher attaches a probability or a dated estimate to the AI-break scenario.
- Project11's risq list: a falling count of exposed bitcoin public keys would show large holders acting on the advice.
- Whether Ethereum's long-term roadmap brings forward its move to hash-based signatures.
Information, not investment advice. This story is general information about companies and markets, drawn from cited reporting. It is not a recommendation to buy, sell or hold any security; check the cited sources before acting.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+50
- Incentives45
- Confidence62
Perspective Coverage
15 publishers- Builder
- Builder 37%
- Operator
- Operator 34%
- Investor
- Investor 29%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Justin Drake, a researcher at the Ethereum Foundation, proposed 'bunker mode', asking holders to move their assets to brand-new addresses before AI gets good enough to crack the math that protects them.
- [2]
A public key is typically revealed once an address signs a transaction; an address that has never signed keeps its public key hidden, and Drake recommends migrating assets to new addresses whose public keys remain undisclosed.
- [3]
Drake wants large holders to go first, with the process calm and deliberate.
- [4]
Drake pointed to a recent demonstration of mathematical ability by OpenAI, which included a significant disproof of the Erdos unit distance conjecture.
- [5]
Drake framed this as a potential crisis, not a confirmed one; nobody has announced that ECDSA is broken.
- [6]
Drake posted the warning on X on October 7, 2026, at approximately 14:14 UTC.
- [7]
Most blockchains, including Bitcoin and Ethereum, rely on ECDSA; its security assumes deriving a private key from a public key is computationally impossible, and a sufficiently powerful quantum computer, a moment the industry calls qday, has long been seen as the main threat.
- [8]
Drake referenced Project11's 'risq list' as an important tool for tracking exposed BTC public keys.
- [9]
Drake highlighted that wallets holding under roughly 50 BTC have partial protection from exposure risks.
- [10]
A transition toward hash-based cryptography is already part of discussions around Ethereum's long-term roadmap, and Drake has long argued for moving away from traditional cryptographic assumptions.
- [11]
For signers whose keys secure large amounts of value or critical infrastructure, Drake recommends frequent key rotation and adoption of hash-based multi-signing schemes such as SPHINCS.
- [12]
Drake called on major exchanges and custodians, including Binance, Bitfinex and Tether, to take the lead in implementing these measures.
- [13]
Drake indicated that recent progress in AI should accelerate ongoing conversations about crypto security, covering both classical computational threats and quantum computing.
- [14]
If Drake's scenario plays out, the coins most at risk would be those in addresses that have already revealed their public keys; holders who reuse addresses or keep funds in long-active wallets carry more exposure.
- [15]
Drake said AI-powered mathematical reasoning could produce a rapid breakdown of ECDSA, potentially arriving in "months not years" before qday.
- [16]
There was no immediate market reaction to the warning, with traders and exchanges showing little visible concern.
Sources
15 independent publishers whose own reporting we read for this story.
- bankless.comVitalik Flags AI Risk to Crypto, Warns Against Rushed Wallet Moves
1 article · October 8, 2026
- blockchain.newsJustin Drake: AI Risks Breaking Bitcoin ECDSA | Flash News Detail | Blockchain.News
1 article · October 7, 2026
- businessinsider.comCrypto Bros Are Telling People to Enter 'Bunker Mode' - Business Insider
1 article · October 8, 2026
- coindesk.comBitcoin and ether holders urged to enter ‘bunker mode’ against possible AI attacks
1 article · October 8, 2026
- cointelegraph.comJustin Drake urges crypto ‘bunker mode,’ as AI could break wallet security within months
1 article · October 7, 2026
- crowdfundinsider.comEthereum (ETH) Co-Founder Vitalik Buterin Cautions Against Rushed Wallet Moves as AI Risks Rise and Ether Longs Face Liquidations
1 article · October 10, 2026
- crypto.newsEthereum researcher warns AI could crack crypto wallets
1 article · October 8, 2026
- cryptobriefing.comEthereum Foundation researcher Justin Drake urges crypto to prepare ‘bunker mode’ for AI threats
1 article · October 7, 2026
- cryptopolitan.comJustin Drake urges crypto to plan for 'bunker mode' as AI math threatens ECDSA
2 articles · October 8, 2026
- cryptoslate.comOpenAI math breakthroughs raise ‘bunker mode’ alarm from Bitcoin researcher Justin Drake
3 articles · October 8, 2026
- cryptotimes.ioEthereum Researcher Drake Flags ECDSA Risk for Crypto Holders
1 article · October 7, 2026
- decrypt.coEthereum Researcher Says AI May Break Encryption Before Quantum Does
2 articles · October 8, 2026
- gizmodo.comCryptographers Urgently Debating Whether AI Could Break Bitcoin’s Security ‘in Months’
1 article · October 8, 2026
- news.bitcoin.com‘Bunker Mode’? Crypto Experts Argue Over AI Threat to Bitcoin, Ethereum
1 article · October 8, 2026
- unchainedcrypto.comEthereum Researcher's 'Bunker Mode' Call Sparks Debate Over Whether AI Math Threatens Crypto Keys - Unchained
1 article · October 8, 2026
Topics and entities
Topics
- Elliptic-curve cryptography
- AI-Assisted Mathematics
- Post-Quantum Cryptography
- Institutional Crypto Custody