Will we “lose public key cryptography” by EoY 2028? A small Manifold market is suddenly one of the busiest offbeat contracts on the platform. The market sits at a 10% implied chance of YES as of October 09, 2026, yet roughly 29% of its all-time volume changed hands in a single day. The spark was a cluster of warnings in early October that artificial intelligence, not just quantum computers, might one day crack the math that secures crypto wallets, web traffic and signed software.
What the market is actually asking
The contract, created by John David Pressman on Manifold, poses a deliberately provocative question: will the world “lose public key cryptography” by the end of 2028? That phrasing is loose, so the resolution criteria matter more than the headline.
According to the market description, YES requires that the public key algorithms in widespread use become undermined by public advances in mathematics, to the point that they need immediate deprecation before December 31, 2028. The named targets include RSA, Diffie-Hellman, ECDSA and EdDSA, plus the newer post-quantum options ML-KEM and Streamlined NTRU Prime. A qualifying event would be a public demonstration convincing enough that experts call for emergency action, evidenced by something concrete such as browsers changing their protocols or e-commerce systems shutting down. The creator also clarified that breaking only public key signing, rather than encryption, would not be enough to resolve YES. Anything short of that resolves NO.
In other words, this is not a bet on whether migration is happening. It is a bet on a sudden, catastrophic, publicly verified break. That distinction is the whole story. If you are new to how these contracts translate sentiment into a number, our explainer on how prediction markets work is a useful primer.
The odds, and what 10% implies
As of October 09, 2026, the market prices YES at 10% on Manifold. Read literally, traders are assigning a one-in-ten chance that an established public key scheme collapses in public view within roughly 27 months. That is low in absolute terms but strikingly high for an outcome that most cryptographers would have dismissed outright a year ago.
A prediction market price is not a forecast handed down by an oracle. It is the balance point where buyers and sellers stop trading, which makes it a rough read on collective belief. A 10% YES price means the crowd still expects public key cryptography to survive intact through 2028, but it is no longer treating the alternative as unthinkable. For context on turning a price into a probability, see our note on implied probability.
The more telling signal is activity, not level. With roughly 29% of the market’s all-time volume trading in a single session and a top-tier 24-hour turnover within its source, attention spiked sharply. That pattern usually means fresh news, not a slow drift in opinion.
What set off the move: a “bunker mode” week
The catalyst was a run of warnings in the first week of October 2026 that reframed an old quantum worry around a newer one: AI-assisted mathematics. Instead of waiting for a fault-tolerant quantum computer to run Shor’s algorithm, several researchers argued that machine learning systems might help humans find a shortcut through the hard math first.
That idea moved from a niche concern to a mainstream crypto story within days. It drove the phrase “bunker mode” into headlines, pushed exchange-watchers to debate wallet hygiene, and gave a dormant Manifold contract a reason to come alive. None of the warnings claimed a break had happened. They argued the probability of one, over a multi-year window, was higher than the market had assumed.
Buterin, Drake and the AI-breaks-crypto debate
On October 7, 2026, Ethereum Foundation researcher Justin Drake called on the industry to plan for “bunker mode,” a controlled migration of funds to fresh addresses whose public keys have never appeared on-chain. His concern, as reported by The Block, is that an AI-assisted attacker could one day recover a private key from an exposed public key and spend the coins on ordinary hardware, with no quantum machine required. Drake pointed to Project Eleven’s tracking of Bitcoin addresses with exposed public keys, a list covering millions of addresses.
Ethereum co-founder Vitalik Buterin responded with a measured take the same week. He said it was “plausible” for AI to help weaken cryptography within about two years and singled out elliptic curve cryptography and even lattice-based post-quantum schemes such as ML-DSA as areas to watch, but he explicitly told holders not to scramble to move funds today. Decrypt and CryptoSlate both reported his call for calm. Cardano founder Charles Hoskinson publicly pushed back on the framing, underscoring that this is a debate among named figures rather than a settled consensus.
Part of why the argument landed now is the broader run of reporting on AI systems posting results on hard mathematics, a thread we have tracked in our coverage of OpenAI’s math research and Lean verification. The leap from solving competition problems to breaking cryptographic assumptions is enormous, but it is the leap traders are now pricing.
Europol’s quantum warning and “harvest now, decrypt later”
The research debate landed alongside an institutional one. On October 7, 2026, Europol published two reports examining how quantum computing could threaten cryptocurrency and encrypted data. One, from its European Cybercrime Centre, focused on crypto wallets. The other, developed with Universidad Carlos III de Madrid, examined “harvest now, decrypt later,” the tactic of collecting encrypted data today to decrypt once the capability exists.
Europol identified the public key cryptography that controls wallets and authorizes transactions as the main point of exposure, because a sufficiently powerful machine could derive a private key from an exposed public key. As reporting on the agency’s findings noted, Europol’s message was not that Bitcoin is broken, but that organizations should begin the transition to quantum-resistant cryptography now rather than when the threat arrives. That is migration advice, not a break announcement, which is exactly the line the market is testing.
The deadlines nobody set for 2028
Government timelines tell a similar story: urgent, but multi-year. In June 2026, the White House Office of Management and Budget issued memorandum M-26-15, directing federal agencies to submit post-quantum migration plans within 120 days, a deadline that falls in October 2026. The memo sets targets to migrate sensitive systems to post-quantum key establishment by December 31, 2030 and to post-quantum signatures by December 31, 2031.
Those dates sit well past the end of 2028. The standards themselves are ready: the National Institute of Standards and Technology has finalized ML-KEM for key establishment, ML-DSA for signatures and SLH-DSA as a hash-based backup, and continues to urge organizations to start replacing vulnerable systems, as documented on the NIST post-quantum cryptography project page. The official posture is that migration is a transition stretching into the 2030s, not a cliff in 2028.
Why the “break” bar is so high
The gap between “migrate now” and “break by 2028” is where the market’s low price comes from. Public estimates still place a cryptographically relevant quantum computer somewhere in the 2030 to 2040 range, and no independently reproduced result has factored an RSA-2048 key. A widely discussed resource estimate from a Google Quantum AI researcher argued a fault-tolerant machine with under one million qubits could factor RSA-2048 in under a week, as CSO Online reported, but that is a projection about future hardware, not a demonstration.
| Milestone | Timeframe | Relevance to the 2028 market |
|---|---|---|
| Manifold market resolution | By Dec 31, 2028 | The deadline being traded |
| Federal PQC migration plans due (OMB M-26-15) | Oct 2026 | Planning, not a break |
| US target: PQC key establishment | Dec 31, 2030 | After the market window |
| US target: PQC digital signatures | Dec 31, 2031 | After the market window |
| Common expert estimate for a capable quantum computer | 2030 to 2040 | Largely after the window |
| UK NCSC broad migration completion | 2035 | Well after the window |
Every official timeline points past 2028. For YES to resolve, something has to break the schedule, most plausibly an unexpected mathematical advance rather than a hardware milestone that is already years out.
Why the crowd still holds the line at 10%
A 10% price captures both halves of the story. On one side, the cost of being wrong is enormous, and traders are no longer willing to price catastrophic cryptographic failure at zero when named researchers at major foundations are discussing it openly. On the other side, the resolution bar is extreme: it demands a public, expert-convincing break of entire algorithm families, with visible fallout such as browser protocol changes, inside a short window. Those two forces net out to a small but non-trivial number.
It is also worth separating the asset-specific risk from the market’s broad claim. Much of the “bunker mode” discussion concerns exposed public keys on specific blockchain addresses, a narrower and more addressable problem than the collapse of public key encryption everywhere. Wallet hygiene can blunt the first without doing anything about the second. For readers comparing where such contracts trade, our Kalshi vs Polymarket comparison covers how venue and structure shape these prices.
What to watch next
Three things would move this market. First, any peer-reviewed or independently reproduced mathematical result that weakens a named algorithm, as opposed to a preprint or a resource estimate. Second, concrete defensive action by major platforms, such as browsers or large exchanges forcing protocol changes, which would be read as evidence that experts believe a break is near. Third, the volume signal itself: if turnover stays elevated rather than fading after the news cycle, it suggests traders expect more developments, not fewer.
For now, the verifiable evidence supports migration and eroding confidence, not loss. The standards exist, the deadlines run into the 2030s, and no public demonstration has broken RSA, ECDSA or the post-quantum finalists.
FAQ
Does a 10% YES mean public key cryptography will probably break by 2028?
No. It means the market puts roughly a one-in-ten chance on a public, expert-convincing break within the window, and about nine-in-ten on the status quo holding. The crowd still expects cryptography to survive 2028.
Has any quantum computer actually broken RSA or ECDSA?
No independently reproduced result has factored an RSA-2048 key or recovered a real ECDSA private key. The recent warnings concern projected and AI-assisted risks, not demonstrated attacks.
What is “bunker mode”?
It is Justin Drake’s proposal that crypto holders gradually move funds to addresses whose public keys have never been exposed on-chain, as a precaution against a future AI-assisted or quantum break. Buterin advised against panic moves today.
Why do federal deadlines run to 2030 and 2031 if the risk is urgent?
Because migration is slow and the official view is that a capable attacker is years away. OMB M-26-15 and NIST frame the work as a multi-year transition, with plans due in 2026 and system migration targeted for 2030 and 2031.
The Bottom Line
Sources
- Manifold — Will we “lose public key cryptography” by EoY 2028?
- The Block — Ethereum researcher Justin Drake calls for ‘bunker mode’ planning
- CoinDesk — Bitcoin and ether holders urged to prepare ‘bunker mode’
- Decrypt — Vitalik Buterin weighs in on the ‘bunker mode’ shift
- CryptoSlate — Vitalik Buterin urges calm as AI raises cryptography fears
- Crypto Briefing via TradingView — Europol on quantum risk to crypto wallets
- OMB — M-26-15, Execution of the Migration to Post-Quantum Cryptography
- NIST — Post-Quantum Cryptography project
- CSO Online — Breaking RSA encryption just got easier for quantum computers
Prediction markets carry financial risk and this article is not investment, trading or betting advice. Market availability is restricted by jurisdiction: Polymarket is not available to US persons, while Kalshi is a CFTC-regulated US exchange, and Manifold operates with play-money and sweepstakes mechanics that vary by region. Participation is limited to those 18 or older, or 21 or older where applicable. If gambling is a problem for you or someone you know, call 1-800-GAMBLER for confidential help.
Related Coverage
- Traders Bet SpaceXAI Will Become SpaceXSI: Manifold Market Hits 58%
- ClankerView's 100-User Bet: Why Traders Just Piled Into a Tiny Manifold Market at 12%
- ChatGPT 75% Market Share Bet Heats Up on Manifold as Traders Pile In
- Elon Musk Political Party Before Trump's Term Ends? Traders Pile Into Manifold Market at 25%
- Calvin Wang's MIT Homework Becomes a Manifold Market: Traders Put 84% Odds on an On-Time Submission
