Skip to content

The Edge of the Cyber World See the latest

Apps

Will We “Lose Public Key Cryptography” by 2028? Inside the Manifold Market Traders Suddenly Cannot Stop Betting On

Will we “lose public key cryptography” by EoY 2028? A small Manifold market is suddenly one of the busiest offbeat contracts on the platform. The market sits at a 10% implied chance of YES as of October 09, 2026, yet roughly 29% of its all-time volume changed hands in a single day. The spark was a cluster of warnings in early October that artificial intelligence, not just quantum computers, might one day crack the math that secures crypto wallets, web traffic and signed software.

What the market is actually asking

The contract, created by John David Pressman on Manifold, poses a deliberately provocative question: will the world “lose public key cryptography” by the end of 2028? That phrasing is loose, so the resolution criteria matter more than the headline.

According to the market description, YES requires that the public key algorithms in widespread use become undermined by public advances in mathematics, to the point that they need immediate deprecation before December 31, 2028. The named targets include RSA, Diffie-Hellman, ECDSA and EdDSA, plus the newer post-quantum options ML-KEM and Streamlined NTRU Prime. A qualifying event would be a public demonstration convincing enough that experts call for emergency action, evidenced by something concrete such as browsers changing their protocols or e-commerce systems shutting down. The creator also clarified that breaking only public key signing, rather than encryption, would not be enough to resolve YES. Anything short of that resolves NO.

In other words, this is not a bet on whether migration is happening. It is a bet on a sudden, catastrophic, publicly verified break. That distinction is the whole story. If you are new to how these contracts translate sentiment into a number, our explainer on how prediction markets work is a useful primer.

The odds, and what 10% implies

As of October 09, 2026, the market prices YES at 10% on Manifold. Read literally, traders are assigning a one-in-ten chance that an established public key scheme collapses in public view within roughly 27 months. That is low in absolute terms but strikingly high for an outcome that most cryptographers would have dismissed outright a year ago.

A prediction market price is not a forecast handed down by an oracle. It is the balance point where buyers and sellers stop trading, which makes it a rough read on collective belief. A 10% YES price means the crowd still expects public key cryptography to survive intact through 2028, but it is no longer treating the alternative as unthinkable. For context on turning a price into a probability, see our note on implied probability.

The more telling signal is activity, not level. With roughly 29% of the market’s all-time volume trading in a single session and a top-tier 24-hour turnover within its source, attention spiked sharply. That pattern usually means fresh news, not a slow drift in opinion.

What set off the move: a “bunker mode” week

The catalyst was a run of warnings in the first week of October 2026 that reframed an old quantum worry around a newer one: AI-assisted mathematics. Instead of waiting for a fault-tolerant quantum computer to run Shor’s algorithm, several researchers argued that machine learning systems might help humans find a shortcut through the hard math first.

That idea moved from a niche concern to a mainstream crypto story within days. It drove the phrase “bunker mode” into headlines, pushed exchange-watchers to debate wallet hygiene, and gave a dormant Manifold contract a reason to come alive. None of the warnings claimed a break had happened. They argued the probability of one, over a multi-year window, was higher than the market had assumed.

Buterin, Drake and the AI-breaks-crypto debate

On October 7, 2026, Ethereum Foundation researcher Justin Drake called on the industry to plan for “bunker mode,” a controlled migration of funds to fresh addresses whose public keys have never appeared on-chain. His concern, as reported by The Block, is that an AI-assisted attacker could one day recover a private key from an exposed public key and spend the coins on ordinary hardware, with no quantum machine required. Drake pointed to Project Eleven’s tracking of Bitcoin addresses with exposed public keys, a list covering millions of addresses.

Buterin, Drake and the AI-breaks-crypto debate - Will We "Lose Public Key Cryptography" by 2028? Inside the Manifold Market Traders Suddenly
Buterin, Drake and the AI-breaks-crypto debate

Ethereum co-founder Vitalik Buterin responded with a measured take the same week. He said it was “plausible” for AI to help weaken cryptography within about two years and singled out elliptic curve cryptography and even lattice-based post-quantum schemes such as ML-DSA as areas to watch, but he explicitly told holders not to scramble to move funds today. Decrypt and CryptoSlate both reported his call for calm. Cardano founder Charles Hoskinson publicly pushed back on the framing, underscoring that this is a debate among named figures rather than a settled consensus.

Part of why the argument landed now is the broader run of reporting on AI systems posting results on hard mathematics, a thread we have tracked in our coverage of OpenAI’s math research and Lean verification. The leap from solving competition problems to breaking cryptographic assumptions is enormous, but it is the leap traders are now pricing.

Europol’s quantum warning and “harvest now, decrypt later”

The research debate landed alongside an institutional one. On October 7, 2026, Europol published two reports examining how quantum computing could threaten cryptocurrency and encrypted data. One, from its European Cybercrime Centre, focused on crypto wallets. The other, developed with Universidad Carlos III de Madrid, examined “harvest now, decrypt later,” the tactic of collecting encrypted data today to decrypt once the capability exists.

Europol identified the public key cryptography that controls wallets and authorizes transactions as the main point of exposure, because a sufficiently powerful machine could derive a private key from an exposed public key. As reporting on the agency’s findings noted, Europol’s message was not that Bitcoin is broken, but that organizations should begin the transition to quantum-resistant cryptography now rather than when the threat arrives. That is migration advice, not a break announcement, which is exactly the line the market is testing.

The deadlines nobody set for 2028

Government timelines tell a similar story: urgent, but multi-year. In June 2026, the White House Office of Management and Budget issued memorandum M-26-15, directing federal agencies to submit post-quantum migration plans within 120 days, a deadline that falls in October 2026. The memo sets targets to migrate sensitive systems to post-quantum key establishment by December 31, 2030 and to post-quantum signatures by December 31, 2031.

The deadlines nobody set for 2028 - Will We "Lose Public Key Cryptography" by 2028? Inside the Manifold Market Traders Suddenly Cannot Stop
The deadlines nobody set for 2028

Those dates sit well past the end of 2028. The standards themselves are ready: the National Institute of Standards and Technology has finalized ML-KEM for key establishment, ML-DSA for signatures and SLH-DSA as a hash-based backup, and continues to urge organizations to start replacing vulnerable systems, as documented on the NIST post-quantum cryptography project page. The official posture is that migration is a transition stretching into the 2030s, not a cliff in 2028.

Why the “break” bar is so high

The gap between “migrate now” and “break by 2028” is where the market’s low price comes from. Public estimates still place a cryptographically relevant quantum computer somewhere in the 2030 to 2040 range, and no independently reproduced result has factored an RSA-2048 key. A widely discussed resource estimate from a Google Quantum AI researcher argued a fault-tolerant machine with under one million qubits could factor RSA-2048 in under a week, as CSO Online reported, but that is a projection about future hardware, not a demonstration.

Why the "break" bar is so high - Will We "Lose Public Key Cryptography" by 2028? Inside the Manifold Market Traders Suddenly Cannot Stop Bet
Why the “break” bar is so high
Milestone Timeframe Relevance to the 2028 market
Manifold market resolution By Dec 31, 2028 The deadline being traded
Federal PQC migration plans due (OMB M-26-15) Oct 2026 Planning, not a break
US target: PQC key establishment Dec 31, 2030 After the market window
US target: PQC digital signatures Dec 31, 2031 After the market window
Common expert estimate for a capable quantum computer 2030 to 2040 Largely after the window
UK NCSC broad migration completion 2035 Well after the window

Every official timeline points past 2028. For YES to resolve, something has to break the schedule, most plausibly an unexpected mathematical advance rather than a hardware milestone that is already years out.

Why the crowd still holds the line at 10%

A 10% price captures both halves of the story. On one side, the cost of being wrong is enormous, and traders are no longer willing to price catastrophic cryptographic failure at zero when named researchers at major foundations are discussing it openly. On the other side, the resolution bar is extreme: it demands a public, expert-convincing break of entire algorithm families, with visible fallout such as browser protocol changes, inside a short window. Those two forces net out to a small but non-trivial number.

It is also worth separating the asset-specific risk from the market’s broad claim. Much of the “bunker mode” discussion concerns exposed public keys on specific blockchain addresses, a narrower and more addressable problem than the collapse of public key encryption everywhere. Wallet hygiene can blunt the first without doing anything about the second. For readers comparing where such contracts trade, our Kalshi vs Polymarket comparison covers how venue and structure shape these prices.

What to watch next

Three things would move this market. First, any peer-reviewed or independently reproduced mathematical result that weakens a named algorithm, as opposed to a preprint or a resource estimate. Second, concrete defensive action by major platforms, such as browsers or large exchanges forcing protocol changes, which would be read as evidence that experts believe a break is near. Third, the volume signal itself: if turnover stays elevated rather than fading after the news cycle, it suggests traders expect more developments, not fewer.

For now, the verifiable evidence supports migration and eroding confidence, not loss. The standards exist, the deadlines run into the 2030s, and no public demonstration has broken RSA, ECDSA or the post-quantum finalists.

FAQ

Does a 10% YES mean public key cryptography will probably break by 2028?
No. It means the market puts roughly a one-in-ten chance on a public, expert-convincing break within the window, and about nine-in-ten on the status quo holding. The crowd still expects cryptography to survive 2028.

Has any quantum computer actually broken RSA or ECDSA?
No independently reproduced result has factored an RSA-2048 key or recovered a real ECDSA private key. The recent warnings concern projected and AI-assisted risks, not demonstrated attacks.

What is “bunker mode”?
It is Justin Drake’s proposal that crypto holders gradually move funds to addresses whose public keys have never been exposed on-chain, as a precaution against a future AI-assisted or quantum break. Buterin advised against panic moves today.

Why do federal deadlines run to 2030 and 2031 if the risk is urgent?
Because migration is slow and the official view is that a capable attacker is years away. OMB M-26-15 and NIST frame the work as a multi-year transition, with plans due in 2026 and system migration targeted for 2030 and 2031.

The Bottom Line

A niche Manifold contract jumped to life because early-October 2026 warnings from Justin Drake, Vitalik Buterin and Europol made AI-assisted attacks on cryptography a mainstream topic. At a 10% YES price as of October 09, 2026, traders are pricing real but low odds of a public break of public key cryptography by the end of 2028. The weight of evidence, from OMB and NIST timelines running into the 2030s to the absence of any reproduced break, still points to accelerated migration rather than collapse. Watch for a reproduced mathematical result or forced protocol changes; absent those, the crowd’s “unlikely, not impossible” read is the defensible one.

Sources

Prediction markets carry financial risk and this article is not investment, trading or betting advice. Market availability is restricted by jurisdiction: Polymarket is not available to US persons, while Kalshi is a CFTC-regulated US exchange, and Manifold operates with play-money and sweepstakes mechanics that vary by region. Participation is limited to those 18 or older, or 21 or older where applicable. If gambling is a problem for you or someone you know, call 1-800-GAMBLER for confidential help.

Related Coverage

Source: Tech Insider

More from this desk