Bunker mode

Bunker mode runs your private account entirely on hash-based cryptography, the kind expected to hold up against quantum computers and against new math that could break elliptic curves. It is there from day one, and moving into it takes one click.

Everything you do in Redacted stays the same. You swap, trade, borrow, lend and stake on Rujira as before, in the same app and with the same liquidity as everyone else. The only thing that changes is how your account is secured.

Why bunker mode

Bitcoin, Ethereum and nearly every wallet sign with elliptic curves. In October 2026, Ethereum Foundation researcher Justin Drake called on the industry to “calmly begin planning for bunker mode”, a controlled move of funds to addresses whose public keys stay hidden behind a hash, in case AI-driven mathematics or quantum computers break those curves sooner than expected. He sees the way out in hash-based cryptography, and Redacted’s bunker mode builds its notes, proofs and signatures on it, with no curves and no lattices.

If you move your coins for bunker mode anyway, that move is also the moment to cut the link to your old wallet for good. The article Bunker mode needs privacy explains the background and why a public migration draws a map of who holds what.

Two modes

Standard mode is the simplest way in. Your private account comes from a signature of the wallet you already have, and one backup file makes it independent even of that wallet.

Bunker mode asks for one extra step. Your account becomes 25 words that you keep yourself, so it never depends on a wallet key that could one day be broken. Proofs, signatures and notes all rest on hashes.

You can start in standard mode and move into bunker mode at any time. Both modes reach the same products and the same markets.

What changes underneath

• Notes, nullifiers, the note tree and every proof transcript use SHA-256, the kind of battle-tested hash that bunker mode bets on. The formats keep room for a second hash such as BLAKE2s.
• Every spend from your private balance is proved with a STARK, a zero-knowledge proof whose only cryptographic building block is the hash. There are no elliptic curves, pairings or lattices in the proof, and no trusted setup.
• Nodes sign their approvals, and Spending accounts their actions, with SLH-DSA, the hash-based signature standard NIST published as FIPS 205, based on SPHINCS+.
• Your account is 256 random bits, kept as 25 words, plus a second key that stays on your devices. It is never derived from a wallet signature, so a broken wallet key does not open your private balance.
• Nothing bunker mode writes on chain is encrypted, so there is nothing stored there for a future computer to decrypt.

Move into bunker mode

Moving takes one click. The app creates your bunker mode account and shows your 25 words to write down. Redacted then moves your private balance into the new account in the background, with no transaction linking the two accounts, and everything you used before works exactly the same.

Keep your 25 words safe

• Write the words down in order and keep them offline, because they are your account.
• Type them only into the Redacted app you opened yourself. Nobody from Redacted will ever ask for them.
• Keep them apart from your wallet’s seed phrase, so one lost piece of paper never exposes both.

When the chains upgrade

Bitcoin and Ethereum still sign with elliptic curves, and moving them to post-quantum signatures is work under way across the industry. THORChain’s vaults sign on those chains, so THORChain moves together with them. When that happens, Redacted has nothing left to change. Its part is already built.