Ethereum researcher urges "bunker mode" over ECDSA break risk
Regulation & Gov ·
Justin Drake says private keys could become crackable within months, not years, and wants large holders to start shifting funds to addresses that have never signed a transaction.
Justin Drake, an Ethereum researcher, has called on the industry to begin planning for what he terms "bunker mode," according to theblock.co. His core recommendation, laid out in a post on x.com, is a gradual, controlled migration of assets to fresh wallets whose public keys have never been exposed by signing, with any leftover balance moved again to a new address each time a transaction is signed. He stresses the move is precautionary and should not be rushed or treated as cause for alarm, since it requires no new wallet software or cryptographic scheme to execute today.
The warning centers on a scenario in which ECDSA, the signature algorithm underpinning most crypto wallets, could be broken in a matter of months rather than years, meaning a private key could be derived from a public key quickly — potentially within a week — using accessible hardware such as a large GPU cluster. Drake points to a string of recent surprises in pure mathematics, including the overturning of long-standing assumptions around integer-multiplication complexity and the 3SUM problem, plus May's disproof of the Erdős unit distance conjecture, as evidence that fields once thought settled can shift abruptly. He also flags a large batch of mathematical results recently published by OpenAI, arguing that a conspicuous absence of cryptography-related findings among them may reflect deliberate suppression rather than irrelevance, citing past instances of government intervention in quantum cryptanalysis research.
Elliptic-curve cryptography is singled out as particularly exposed because of its mathematical structure, in contrast to hash functions, which are built to resist such patterned analysis; Drake also raises the possibility of a classical analogue to Shor's algorithm capable of undermining both elliptic curves and RSA simultaneously. He points to Project11's "risq list" as a tool already tracking vulnerable bitcoin public keys and names Binance, Bitbank, Robinhood, Bitfinex, and Tether as exchanges that could reinforce cold-storage practices, with a further discussion planned in London next month.
Smaller holdings may carry some incidental protection: wallets under 50 BTC benefit from cover provided by roughly 20,000 dormant addresses tied to Sato