Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash. Holders, starting with large and sophisticated ones, should consider moving the bulk of their funds to addresses that have never signed a transaction. And when they do sign one, they should also move remaining funds to a new address (possibly generated from the same seed phrase). Don't rush. While I believe there is cause for action a rushed migration would do more harm than good. Don't panic either. Moving assets to protected addresses is a simple, preventative step which does not require new cryptography or new wallets. IMO it is now reasonable to brace for the possibility that ECDSA breaks before qday, in the worst case in months not years. By "break" I mean fast private key recovery (e.g. in one week) on available hardware (e.g. a large GPU cluster). Recent days have been humbling for human mathematical intuition. Long-held, unquestioned hypotheses have fallen. This includes the n log(n) bound for integer multiplication and the 3SUM conjecture. In hindsight, May's unexpected disproof of the Erdős unit distance conjecture was our warning shot. Yesterday's OpenAI drop made it clear that mathematical superintelligence is upon us. They say there are weeks where decades happen. We are about to live through weeks where centuries of mathematical progress happen. Could our magic 64-byte ECDSA signatures be too good to be true? Was it just security through obscurity all this time? Elliptic curves feel especially vulnerable to superintelligence. Curves carry rich structure, with room for fancy tricks like Schoof, Frobenius, pairings. (By contrast, hashes are designed to minimise algebraic structure.) Separately, as Ewin Tang can attest, an efficient quantum algorithm sometimes foreshadows an efficient classical one. We should be open to the possibility of a classical counterpart to Shor that breaks elliptic curves and RSA at once. Also noteworthy is the striking under-representation of cryptographic breakthroughs among the 722 mathematical results OpenAI published. I've witnessed first-hand the US government censoring academic quantum cryptanalysis results. Backroom interventionism is my base case. I urge large, sophisticated actors to lead by example. Project11's "risq list" (bitcoin-risq-list.projecteleven[.]com) is a great tracker of exposed BTC pubkeys. Binance, Bitbank, Robinhood, Bitfinex, and Tether have an opportunity to harden their cold storage. Next month I'll address institutions in London in a live Q&A (forum.ethereuminstitutional[.]org/london-2026). Again, please do not rush. Wallets holding under 50 BTC enjoy partial cover from "Satoshi's shield", i.e. his 20K exposed addresses that hold 50 BTC each. Load-bearing signers like oracles and L2 security councils should consider rotating ECDSA pubkeys with every signed message and/or multi-signing with a hash-based schemes like SPHINCS. Exiting bunker mode safely will require post-AI cryptography. My inclination is to go all-in on hash-based cryptography and avoid structured mathematical assumptions entirely, whether from curves, lattices, or isogenies. A single battle-tested hash (e.g. from the SHA or BLAKE families) yields plausible post-AI security. The Ethereum roadmap on strawmap[.]org fully embraces hash-based cryptography with end-to-end formal verification as a response to the quantum threat. Those timelines must now be revisited and accelerated in light of mathematical superintelligence. I'll be pushing for maximum defensive acceleration.

End idle capital. • Choose where you lend/borrow on the risk curve • Keep liquidity connected across the market • Earn a base yield on unutilized capital The engine behind Lotus markets, in 25 seconds.

when @Neutrl froze, ~$53M was stuck in NUSD + sNUSD 43 days left to redeem at 51¢ on the dollar and only $9.7M of $39M have taken the redemption offer so far theyoungcrews.github.io/neut…

Here’s how a Lotus BTC Carry works 👇

today we're shopping as a borrower who ranks on lowest rate. it's the column everyone sorts by, and for most loans it is the whole decision. the loan is the same at every venue: 3,000 wsteth posted, $4m of usdc drawn, twelve months. no ltv ceiling on this pair binds a draw that size. the cheapest quote is @compoundfinance's usdc market at 3.99%, with $38.95m free. the whole ticket funds at once. the venue that has closed cheapest on this pair 20 straight days is @sparkfinance's main market at 4.18%. it has $3.79m left, and the ticket is $4m. @aave's main market comes next at 4.31% with $188.5m behind it. past that the list thins: the next quote with $4m behind it is @morpho's deepest wsteth/usdc market at 5.08%, $52.2m free. what 3.99% costs is a rate that sits still. compound's usdc rate has printed as high as 10.53% inside the last 30 days. spark has not been outside 3.93% to 4.27%. at this size, ranking on rate: compound, 3.99%, $38.95m free. wanting a rate that barely moves: spark, 4.18%, ticket under $3.79m. wanting the deepest queue: aave, 4.31%, $188.5m. ranking on rate wins twice here: 18bps under the streak holder, $1.8k/yr per $1m, and the entire $4m funds at once. what it does not buy is the rate staying where you signed it. at this size, the market runs out of dollars before it runs out of quotes.

just tried Opus 5.5 for some animation prompt: make a hand-drawn stop-motion animation; story: you're defi saver and explaining yourself in 1st person honestly...

aave lends to 80.5% of your eth's value and charges 4.40% for the dollars. spark lends to 85% and charges 4.13%: more borrowing power for less money. spark has $3.9m available to draw, against aave's $142.7m.

Riskiest market = lowest borrow rate. The curve is inverted Nothing here is pricing risk, only how empty the pool is Matters less to a borrower far from liquidation, but a lot to lenders. They're paid less for taking more risk, so they don't. That's how you get a $3.4m market

if you're on the wsteth/weth loop through compound by default: it's earned it. cheapest every day this month, zero lead changes, +41bps best carry. depth fell 17.26% this week, $36.2m to $29.9m. the rate won't move while nothing contests it. the ceiling will.

today we're shopping as a borrower who ranks by health factor: distance to liquidation, not the sticker rate. the loan: 1,000 wsteth collateral, 900 weth borrowed, held. draw caps differ by venue, but the loan's the same size everywhere, so the number that matters is each venue's liquidation threshold: where it actually winds the position down. @compoundfinance's eth market closed cheapest 29 of the last 30 days. today @morpho's 94.5% tier, its liquidation threshold, takes over: 1.84% and 44bps carry, a hair under compound's 1.85% and 43, with a wider threshold too, 94.5% vs 93%. morpho's depth is tight at this size, $4.4m against a roughly $4m draw; compound holds $29.7m, six times the room. morpho's 96.5% tier ties @aave's prime pool, a separate high-ltv instance from aave's main pool, on threshold. morpho's cheaper there too, 1.93% vs 1.99%, and pays more carry, 35bps vs 33; both clear this loan's size, $9.7m morpho against $6.8m aave. @0xfluid's 95% vault, named for its draw cap rather than its threshold, winds down at 97%, the widest on the board, and the one venue here that costs you carry to hold the loop: -15bps. buffer and rate: morpho 94.5%, 1.84%, 44bps carry. tied on rate, deepest: compound, one bp back, $29.7m. health-ranked money goes to morpho's 94.5% tier: it wins the threshold and the rate. the only cost is depth headroom, compound's is six times deeper. there is no one-size-fits-all loan. rank by what you're protecting; the board hands you a different winner.

A loan is more than a rate, but you wouldn't know it from most DeFi today Across cost, rate stability, LTV, and liquidity depth: there is no one-size-fits-all loan. But there is a best one for you Loanscape exists to find your best borrow Free. Cross-protocol. Live.