OpenAI math advances prompt crypto ‘bunker mode’ warning

Drake, a prominent Ethereum researcher, specifically warned that artificial intelligence could discover a shortcut to recovering wallet private keys, possibly before quantum computers become a practical threat. No such AI attack has been demonstrated.

How a Math Result Ended Up Aimed at Wallets

Bitcoin and Ethereum rely heavily on elliptic-curve cryptography to establish ownership and authorize transactions. Standard Ethereum accounts use the Elliptic Curve Digital Signature Algorithm (ECDSA) on the secp256k1 curve. An account’s public key becomes reconstructable once it sends a transaction, so if a private key could be derived efficiently, those assets would be at risk. Accounts that have never sent a transaction keep an extra layer of protection, since only a hash of the public key, the address, is visible. That is the threat Drake is pointing at.

His warning came after OpenAI’s October 6 release of new mathematical results. The company tested its internal frontier model across thousands of problems, and many of the proofs were published with computer-checkable Lean formalizations. Drake argues that AI’s accelerating pace in mathematical discovery means assumptions about the security timeline of elliptic-curve cryptography need a second look. In a worst-case scenario, he suggested, an ECDSA break could arrive “in months, not years.” OpenAI’s announcement did not report any practical attack on ECDSA or RSA.

Europol has raised a related concern, warning that quantum computing could undermine the cryptography protecting cryptocurrency wallets. It urged the industry to prepare now, saying uncertainty over timing should not cause delays.

Who Drake Wants to Move First

The proposed response does not require new blockchain infrastructure. Drake’s advice on protecting holdings comes down to two habits:

• Move funds to addresses that keep their public keys hidden
• Avoid unnecessary outgoing transactions, which are what expose a key in the first place

How much protection this offers depends on the address type. Bitcoin Taproot outputs, for example, expose a public key from the outset.

He urged large custodians like Binance and Tether to lead the transition, and recommended aggressive precautions for critical blockchain infrastructure, including rotating ECDSA keys for oracles and layer-2 security councils. Ethereum’s second annual post-quantum research retreat is scheduled for October 9 to October 12.

Hashlytics Take

Treat this as a hygiene story, not a countdown. The “months, not years” line is one researcher’s worst case, and the OpenAI results it leans on did not touch ECDSA or RSA. What makes Drake’s advice easy to act on is that it costs almost nothing: fewer exposed public keys is sensible practice whether or not an AI shortcut ever appears. The risk worth watching is the other direction, where a speculative warning pushes custodians into rushed mass migrations that create operational mistakes of their own. Move deliberately, and let evidence of an actual attack set the pace.