Justin Drake Urges 'Bunker Mode' Migration to Fresh Crypto Addresses

Ethereum Foundation researcher Justin Drake urged the blockchain industry on Oct. 7 to prepare for “bunker mode” through a controlled migration of assets to fresh addresses whose public keys remain hidden behind a hash.

In a post on his verified X account, Drake said holders should prepare for the possibility that ECDSA—the elliptic-curve digital signature algorithm—could break “in the worst case in months not years.” He described a hypothetical attack that could recover a private key in, for example, one week using available hardware such as a large GPU cluster, before cryptographically capable quantum computers arrive.

Drake framed the proposal as his “personal recommendation,” not an Ethereum Foundation decision or a change to protocol rules. His timeline is a risk forecast, not a disclosed successful attack. “Don't rush,” he wrote. “While I believe there is cause for action a rushed migration would do more harm than good.”

Ledger CTO and cryptographer Charles Guillemet challenged the urgency. He agreed that avoiding address reuse was reasonable for large holders, but argued that a mass migration was more likely to cause losses through operational mistakes than the scenario it sought to prevent.

What Holders Would Change

Drake asked large, sophisticated holders to lead by moving the bulk of their funds to addresses that have never signed a transaction. After signing, they should move remaining funds to another fresh address, potentially generated from the same seed phrase, he said. He described this as a preventative step that does not require new wallets or cryptography.

He named Binance, Bitbank, Robinhood, Bitfinex and Tether as firms with an opportunity to harden cold storage. For critical signers such as oracles and Layer 2 security councils, he suggested rotating ECDSA public keys with every signed message, adding signatures from a hash-based scheme such as SPHINCS, or both.

The distinction is between an address and its underlying public key. Ethereum’s account documentation explains that an ordinary externally owned account’s address is derived from a hash of its public key. A signature allows others to derive that public key. Signing a message—not just sending an onchain transaction—can therefore reveal it.

Bitcoin requires attention to address type, too. The methodology behind Project Eleven’s tracker identifies both reused keys and output types that expose keys when receiving funds. Taproot’s specification explicitly includes the public key in the output. Simply choosing a never-used Bitcoin address is therefore not enough to ensure that its key stays hidden.

A Warning About AI, Not Just Quantum Computers

Drake tied his warning to recent advances in AI-driven mathematics, including OpenAI’s Oct. 6 release. He argued that elliptic curves’ mathematical structure could make them vulnerable to new attacks on conventional computers, and said he favored hash-based cryptography because it minimizes algebraic structure.

OpenAI’s research repository says its results are at different stages of verification and that some unformalized results could contain errors. Drake’s inference that such progress could soon undermine ECDSA goes beyond that research announcement.

Guillemet called treating a classical ECDSA break within months as a planning baseline “FUD.” He also cautioned that the same loss of confidence in mathematical intuition invoked against elliptic curves could apply to hashes. “We already have a Post Quantum migration to execute, let's not add more confusion,” he wrote.

Ethereum already has a longer-term migration effort. As The Defiant previously reported, the Foundation’s Protocol cluster set a December 2029 target for quantum resistance across execution, consensus and data. Its published plan calls for reassessing quantum progress with outside experts in January 2027. Drake now wants the hash-based cryptography timelines accelerated.