AI vs. Cryptography | Bunker Mode @VitalikButerin new threat model in one line: AI may break the math we were planning to hide behind, not just the math we already knew was weak. Three buckets of crypto math: 1. Hashes still look safe 2. Elliptic curves still on the clock 3. Lattices the new risk (ML-DSA, FHE) What it means by asset, in order of exposure: $BTC | Signature Layer ○ SHA-256 + block hashes are safe ○ Never-spent addresses ○ Keys should be hidden behind a hash ○ Caution = coins on reused addresses ○ Caution = early pay-to-pubkey coins $ZEC | Past Privacy ○ Equihash mining on BLAKE2b is safe ○ Caution = encrypted notes on-chain ○ Upgrades protect future funds ○ No lattices in the proof system $NEAR | PQ Keys + MPC ○ Base layer is hashes + curves ○ Caution = post-quantum keys use ML-DSA ○ Caution = Chain signatures ○ Signing on curves (not post-quantum) ○ No PQ threshold candidate ○ Can add hash-based key anytime Nothing is broken today and all projects can add a hash-based key types. Never rush migrations, but this is two-year research risk priced like a two-week headline.