Ethereum researcher Justin Drake’s call for a “bunker mode” response to a potential cryptographic breakthrough has reopened a difficult question for Bitcoin, Ethereum and other major blockchains: how quickly could users and protocols react if artificial intelligence helped uncover a practical way to derive private keys from public information?
In an Oct. 7 post on X, Drake argued that teams should prepare for a scenario in which new mathematics, potentially accelerated by AI-assisted research, weakens elliptic-curve cryptography before large-scale quantum computers arrive. He described a severe hypothetical timeline of “months rather than years” and urged major holders and institutions to consider orderly measures that reduce exposure from public keys already visible on-chain.
Ethereum co-founder Vitalik Buterin responded in the same discussion that AI-led mathematical advances deserve serious attention, while cautioning that users could create more immediate risks by rushing to move assets. Incorrect addresses, compromised backups, lost keys, incompatible wallets and complex DeFi positions can all turn an attempted security migration into a permanent loss.
The exchange places less emphasis on an imminent break of Bitcoin or Ethereum cryptography than on a planning gap. Networks built around ECDSA and Schnorr signatures would need time to design, test and coordinate replacements if the assumptions behind those systems changed suddenly.
Public-key exposure drives the immediate debate
Elliptic-curve signatures secure ownership across much of the cryptocurrency market. Bitcoin’s legacy spending paths use ECDSA, Ethereum externally owned accounts also rely on ECDSA, and Bitcoin Taproot uses Schnorr signatures. Each system depends on a mathematical asymmetry: generating a public key from a private key is straightforward, while deriving the private key from a public key is considered infeasible using known classical methods.
That distinction has drawn attention to which accounts have exposed public keys and which have not. A wallet address does not always reveal its underlying public key by itself. Ethereum addresses are generated by hashing and truncating a public key, while common Bitcoin formats, including P2PKH and P2WPKH, use hashes of public keys.
Once an Ethereum account sends a transaction, its ECDSA signature is recorded on-chain. The public key can be recovered from that signature, leaving a permanent public record associated with the account. If an attacker acquired a viable method to derive a private key from such a public key, funds controlled by that account could face direct risk.
Bitcoin’s architecture produces a more varied picture. Many conventional Bitcoin outputs do not reveal the public key until coins are spent, but Taproot outputs contain a visible elliptic-curve public key from the outset. Address reuse, published signatures, extended public keys and other wallet disclosures can also expose public-key information.
As a result, an unspent balance is not automatically protected from this category of threat. Nor does moving coins to a fresh address necessarily solve the underlying issue if the replacement address uses the same signature scheme and later reveals its public key through a transaction.
AI concerns differ from the quantum threat model
The longstanding theoretical concern involves quantum computing. A sufficiently large fault-tolerant quantum computer could use Shor’s algorithm to solve the elliptic-curve discrete logarithm problem, potentially allowing an attacker to derive private keys from exposed public keys. There is no evidence that a quantum machine capable of breaking Bitcoin or Ethereum’s main signature systems exists today.
Drake’s warning focused instead on a possible software and mathematics-driven route. AI tools are increasingly being used to search for proofs, test conjectures and navigate difficult mathematical spaces. A major cryptanalytic shortcut against elliptic curves would alter assumptions that protocol developers have treated as durable, even without a breakthrough in quantum hardware.
The prospect remains speculative. No publicly demonstrated classical attack can practically recover private keys from the elliptic-curve public keys used by Bitcoin or Ethereum. Yet the time required to deploy cryptographic replacements creates a problem of its own. Standards must be selected, code written and audited, hardware wallet support developed, custodial systems upgraded, and users guided through account changes.
That process could take years across a fragmented ecosystem, especially where users hold assets in smart contracts, multisignature vaults, bridges, staking arrangements or dormant wallets.
Ethereum faces several cryptographic upgrade paths
Ethereum’s exposure extends beyond signatures used by ordinary accounts. Validator operations use BLS signatures, while KZG commitments support data availability functions. Some zero-knowledge systems also depend on cryptographic assumptions that could require reassessment as post-quantum research advances.
The Ethereum Foundation has created a post-quantum security team and has explored designs including leanXMSS and leanVM in connection with potential future signature and proof systems. These efforts remain preparatory rather than a completed migration plan.
Account abstraction could offer Ethereum a more flexible route at the user level. Smart-contract-based accounts can potentially support alternative signature verification rules rather than tying every user permanently to ECDSA. EIP-8141, a proposal related to native account abstraction, remains under discussion, with its eventual structure and deployment timeline unresolved.
The practical challenge is not limited to adding a new signature option. Wallets would need to support new key types and signing flows, hardware devices would require compatible firmware, and decentralized applications would need to handle accounts with different security models. Token balances may be easy to transfer, but collateral, NFTs, delegated staking positions and contract permissions can complicate any migration.
Bitcoin’s dormant coins pose a separate challenge
Bitcoin would confront a different coordination problem because of its UTXO model and its decades of address formats. Some old outputs may belong to users who have lost access, died, or have no reason to monitor protocol debates. Others may be controlled by long-term holders unwilling to move funds without a clear incentive or widely accepted upgrade path.
Any transition would also need to account for different levels of public-key exposure among legacy outputs, SegWit addresses and Taproot coins. Work on post-quantum approaches in the Bitcoin ecosystem remains largely at the proposal, research and coordination stage.
Other networks have begun testing more concrete options. NEAR announced a mainnet upgrade in July 2026 that supports FIPS 204-based ML-DSA post-quantum signatures, allowing accounts to add quantum-resistant keys. Adding a post-quantum signature scheme, though, does not migrate every application, wallet, validator tool or external service at once.
Caution is more useful than panic
The current debate does not provide evidence that mainstream blockchain signature systems have been practically broken. It does reinforce the value of distinguishing long-term cryptographic preparation from impulsive wallet activity.
Users managing substantial long-term holdings can reduce ordinary operational risks by confirming wallet and network compatibility, securing recovery material, checking recipient addresses carefully, using small test transfers where appropriate, and avoiding unsolicited “post-quantum upgrade” links. Phishing campaigns routinely exploit security fears, and a sudden rush to migrate funds would provide fertile ground for fraud.
For DeFi users, the more immediate task is understanding where assets and permissions are held. Positions spread across lending markets, liquidity pools, bridges and multisignature arrangements may require coordinated steps if a future protocol upgrade demands new accounts or signature methods.
Drake and Buterin’s exchange suggests that the next cryptographic transition may be defined as much by operational discipline and ecosystem coordination as by the mathematics behind it.
Concerned about Ethereum’s evolving security model? Deepen your understanding of cryptographic risks with our guide on digital signatures.
Disclaimer: The content on this page is provided for general informational purposes only and does not represent the views or financial advice of Toobit. We make no guarantees regarding the accuracy or completeness of this information and shall not be held liable for any errors, omissions, or outcomes resulting from its use. Investing in digital assets involves risk; users should independently evaluate their financial situation and the risks involved. For further details, please consult our Terms of Service and Risk Disclosure.
