6M BTC With Exposed Keys: AI Threat Sparks 'Bunker Mode' Debate

Ethereum Foundation researcher Justin Drake on Oct. 7 urged the industry to plan for "bunker mode," a controlled migration of funds to fresh addresses whose public keys have never been revealed on-chain. The trigger was OpenAI's release of 722 math manuscripts generated by an internal model. In the worst case, Drake argued, AI could find a way to break the ECDSA signatures behind bitcoin and ether "in months not years." Glassnode data shows more than 6 million BTC, roughly 30% of supply, already sit behind exposed public keys. No practical attack has been demonstrated, and Vitalik Buterin and much of the industry are telling holders not to rush.

The details

Drake's post on X drew nearly 4 million views, per CoinDesk. As The Block reports, he recommends moving coins to a new address after every spend and called on Binance, Bitbank, Robinhood, Bitfinex and Tether to harden their cold storage. For smaller holders he described a "Satoshi's shield": about 20,000 early addresses holding 50 BTC each with exposed keys would be any attacker's first target, which gives wallets under 50 BTC some cover. Drake himself stressed there is no need to panic, since a rushed move could do more harm than good.

The concern stems from OpenAI's Oct. 7 release of 722 manuscripts across 372 result families from an unreleased model. Only 162 of them carry Lean-verified proofs, Decrypt notes, and mathematicians want the results replicated before drawing conclusions. Buterin replied that botched wallet migrations have already cost people more than actual hacks and that he does not recommend anyone scramble to move funds today. He does take the AI risk seriously, especially for lattice-based schemes that were meant to be the post-quantum replacement, and prefers hash-based signatures. Jan3 CEO Samson Mow was blunter, saying there was no need to panic "because an Ethereum researcher is saying silly things."

Glassnode measured the scale of the exposure in a May report: 6.04 million BTC, or 30.2% of supply, have a visible public key. Of that, 1.92 million BTC are exposed by script design (such as Satoshi's P2PK outputs) and 4.12 million BTC through address reuse. Exchanges account for 1.66 million BTC, with 5% of Coinbase's balance exposed, 85% of Binance's and 100% of Bitfinex's. Glassnode co-founder Rafael Schultze-Kraft said on Oct. 8 the share has since risen to 31.2%, up 222,000 BTC since May.

What it means for the market

The threat is hypothetical for now: neither OpenAI nor any cryptographer has shown a working attack on ECDSA. Still, the debate added to the selling. Bitcoin slipped below $83,000 and dipped to about $82,300, roughly 4% under Tuesday's high near $86,600, while 24-hour liquidations eased to $400 million from $548 million the day before, according to CoinDesk. Our data puts BTC near $82,170, down 1.1% on the day, with a session low of $81,773, below the October low we covered yesterday.

Both camps agree on the practical takeaway: avoid address reuse and do not move funds in a hurry. Track the price in the daily summary and on the bitcoin and ether pages.