MakerDAO / Sky is DeFi's oldest major protocol — December 2017 Single-Collateral DAI, November 2019 Multi-Collateral DAI, August 2024 Sky rebrand. That longevity is a genuine strength for trust and track record. It is simultaneously a quantum liability: 7+ years of Vault CDP collateral keys, MKR governance votes, Oracle Security Module price-pusher keys, and DAI Savings Rate deposit signatures are permanently recorded on Ethereum's immutable ledger. Every one uses secp256k1 ECDSA. Shor's algorithm recovers secp256k1 private keys in polynomial time. A cryptographically-relevant quantum computer (CRQC) can forge oracle prices (triggering mass Vault liquidations), drain Vault collateral directly (threatening DAI's peg), and veto the governance vote that would authorise quantum remediation — simultaneously. BMIC implements NIST FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). This page explains each attack vector in plain language. DYOR before any investment decision.
MakerDAO was launched by Rune Christensen and the Maker Foundation in December 2017 with Single-Collateral DAI ("Sai"), transitioning to Multi-Collateral DAI (MCD) in November 2019. The protocol allows users to lock collateral — originally ETH only, later wBTC, stETH, WSTETH, Real-World Assets, and more — in Vaults (formally Collateralised Debt Positions, CDPs) to mint DAI, a decentralised stablecoin soft-pegged to USD. MKR is the governance token used to vote on stability parameters and executive spells. In August 2024, MakerDAO began rebranding to Sky Protocol: DAI is transitioning to USDS, MKR to SKY, and the broader Maker ecosystem is restructuring under the Endgame plan. As of September 2026, both DAI and USDS are live, and both MKR and SKY governance tokens are active. The total value locked across Vault collateral, DSR, and RWA holdings makes MakerDAO / Sky one of DeFi's largest protocols by TVL.
Every critical MakerDAO / Sky operation relies on secp256k1 ECDSA wallet keys. These are not implementation choices that Sky Protocol can easily swap — they are the foundational signing infrastructure of Ethereum, which MakerDAO inherits for all user-facing operations. Shor's algorithm solves the Elliptic Curve Discrete Logarithm Problem (ECDLP) for secp256k1 in polynomial time. Each layer below represents a distinct HNDL target class archived permanently on Ethereum's ledger.
Every Vault owner uses a secp256k1 wallet to open, top up, and withdraw from their CDP. CRQC recovery of the owner key → frob() colldateral withdrawal → complete Vault drain. Simultaneous multi-Vault drain threatens DAI over-collateralisation and peg stability.
Oracle pusher addresses (whitelisted Medianizer feeds) use secp256k1. CRQC recovery of a pusher key → fabricated price submission → 1-hour OSM delay passes → forged price triggers mass liquidations or enables over-borrowing against inflated collateral. The OSM delay protects against flash attacks, not quantum key recovery.
Governance votes are secp256k1-signed castVote() transactions. CRQC recovery of whale MKR/SKY voter keys: (a) permanently block PQC migration executive spell; (b) push malicious spells draining Surplus Buffer; (c) manipulate stability fees and liquidation ratios. Dual-token structure (MKR + SKY) doubles the governance attack surface.
DSR and SSR balances compound continuously (chi accumulator, drip()). A CRQC adversary ranks HNDL targets by expected payout — a long-term DSR/SSR holder's position grows in attack priority every block. The compound-interest amplifier effect: delay migration = exponentially higher attack priority.
The PSM holds billions in USDC and other stablecoins as direct DAI/USDS minting reserves. PSM admin keys controlling gemJoin parameters and debt ceilings are secp256k1. CRQC recovery of PSM admin keys → unauthorised parameter changes → PSM drain or unlimited DAI minting from zero collateral.
MakerDAO launched December 2017 — one of Ethereum's oldest protocols. Every CDP open, collateral deposit, DAI draw, governance vote, and oracle submission since then is permanently archived on every Ethereum full node. Over 7 years of secp256k1 public keys. Cannot be deleted. Cannot be made private. The entire archive is pre-ranked by on-chain balance for CRQC priority queue construction.
Real-World Asset vaults (Centrifuge, Monetalis, BlockTower) use secp256k1 admin keys to manage on-chain representations of T-bills, structured credit, and other RWAs. CRQC recovery of RWA admin keys → unauthorised RWA collateral reallocation → DAI collateral quality degradation.
The Oracle Security Module is one of MakerDAO's most sophisticated security mechanisms — and it creates a quantum attack surface not found in most other DeFi protocols. Understanding why requires understanding how the OSM works.
MakerDAO uses a set of whitelisted oracle pusher addresses to submit ETH/USD, BTC/USD, and other collateral prices to a Medianizer contract. The Medianizer takes the median of all submitted prices. The Oracle Security Module then applies a mandatory 1-hour time delay before the medianised price is consumed by the Spotter contract and used to update collateral values in the Vat (core accounting contract). This 1-hour delay is designed to protect against flash oracle manipulation — a classical attack vector where a single large trade manipulates a spot price in one block.
The OSM's 1-hour delay protects against an adversary who must manipulate price in real time. A quantum adversary operates differently. The adversary has already harvested oracle pusher public keys from Ethereum's permanent ledger (every poke() transaction records the pusher's key). The adversary recovers the pusher's private key offline, using Shor's algorithm on a CRQC. The adversary then has full unilateral control over that oracle's price submissions — indefinitely, with perfect timing. The 1-hour delay becomes a planning window, not a protection: the adversary schedules the malicious price submission to land precisely when the maximum number of Vaults are near their liquidation ratios, maximising the cascade damage.
This is not a theoretical scenario — it is a deterministic consequence of secp256k1 pusher keys meeting a CRQC with recovered private keys. BMIC's NIST FIPS 204 (ML-DSA / CRYSTALS-Dilithium) signing infrastructure is not vulnerable to Shor's algorithm. DYOR.
A quantum adversary harvests all secp256k1 public keys from Ethereum's permanent ledger: Vault CDP owner keys (every frob/join/exit since Dec 2017), MKR/SKY governance voter keys (sorted by voting power from 7+ year archive), oracle pusher keys (every poke() submission), DSR/SSR depositor keys (sorted by chi-adjusted balance), PSM admin keys, RWA admin keys. The archive is free, permanent, and globally replicated on every Ethereum full node. Priority queue: largest Vault collateral TVL first, highest MKR/SKY governance power second, oracle pushers third, large DSR/SSR depositors fourth.
All MakerDAO / Sky user-facing keys are secp256k1 ECDSA on Ethereum — a single curve type. Shor's algorithm parallelises across the priority-ranked target list. Oracle pusher keys are recovered first (small number of high-impact targets). Top MKR/SKY governance whale keys recovered second. Largest Vault collateral positions recovered third. DSR/SSR large depositors fourth. PSM/RWA admin keys fifth.
Using recovered oracle pusher keys, the adversary submits forged collateral prices to the Medianizer. The OSM 1-hour delay is used as a precision planning window. At T+1 hour, the forged price cascades through Spotter.poke() into the Vat, triggering mass liquidations across all Vaults near the collateralisation boundary. Simultaneously, the adversary uses recovered MKR/SKY governance keys to cast blocking votes preventing any Emergency Shutdown governance action.
Using recovered Vault owner keys, the adversary calls frob() to withdraw collateral from the highest-value positions (coordinated Ethereum transaction bundles, same block window). Simultaneously, DSR/SSR depositors' keys are used to exit the savings modules. The combined effect: a sharp drop in DAI/USDS collateral backing simultaneous with a mass exit of DAI/USDS savings deposits — two-sided peg attack in a single block window.
Any MakerDAO / Sky remediation requires a governance vote: Emergency Shutdown triggering, MKR dilution for bad-debt recapitalisation, PQC migration funding. The adversary uses recovered MKR and SKY governance whale keys to cast blocking votes on all remediation executive spells. The triple-lock: MKR blocking vote (legacy) + SKY blocking vote (new) + governance process timelock — all three use secp256k1 infrastructure the adversary controls. Permanent protocol paralysis at the governance layer.
| # | Blocker | Why It Matters | Sky Mitigation |
|---|---|---|---|
| 1 | Ethereum-Layer PQC Dependency | MakerDAO Vault operations are Ethereum-native secp256k1 transactions. Post-quantum account signing requires Ethereum-level EIP standardisation — not yet finalised as of September 2026 | None |
| 2 | Governance Triple-Lock | PQC migration requires executive spell passing MKR vote + SKY vote + timelock — all using secp256k1 governance infrastructure that a CRQC adversary already controls via recovered whale keys | None — structurally circular |
| 3 | 7+ Year HNDL Archive Irremediable | Every historical Vault CDP key broadcast since December 2017 is permanently on-chain. Migration to new keys creates new HNDL surface; old keys remain in archive forever | Permanent |
| 4 | DAI/USDS Vault Holder Mass Coordination | Every Vault owner must individually sign migration transactions with their secp256k1 key — creating a new HNDL wave even during migration. Catch-22: migration itself is a HNDL event | Partial (migration module exists for DAI→USDS but not for PQC key migration) |
| 5 | PSM / RWA Multi-Counterparty Upgrade | PSM and RWA vaults involve off-chain counterparties (Monetalis, Centrifuge, BlockTower) with legal agreements. PQC migration of admin keys requires coordinated legal and technical updates across all counterparties simultaneously | Complex — multi-jurisdictional |
A fair comparison requires acknowledging what MakerDAO / Sky does genuinely well — independent of its quantum vulnerability. This section is not promotional; it is an honest assessment.
7+ years of live operation since December 2017 with no governance-level exploit draining user funds. The Vat (core accounting) is formally verified. This is an exceptional security track record for classical threat models.
DAI / USDS is meaningfully more decentralised than USDC (Circle, US-regulated) or USDT (Tether). No single company can freeze DAI balances or comply with mass blacklisting requests at the token layer.
The Vat, Cat, Jug, and Vow core accounting contracts have been formally verified by Runtime Verification. This is the highest tier of smart contract assurance — not just audit coverage.
MakerDAO pioneered bringing T-bill yields on-chain via RWA Vaults, earning hundreds of millions in annual yield from US Treasury-backed assets. Sky Savings Rate (SSR) distributes this yield to USDS holders.
DAI / USDS is natively integrated as collateral and base asset in Aave, Compound, Curve, Uniswap, 1inch, Balancer, and Spark Protocol. This network effect is genuine and difficult to replicate.
MakerDAO's Liquidation 2.0 (Clip contracts) improved on the classical English auction with Dutch auctions that start at a high price and decline — improving keeper participation efficiency and reducing liquidity risk during liquidations.
| Criterion | BMIC | MakerDAO / Sky (MKR, DAI, USDS) |
|---|---|---|
| Signing Algorithm | ML-KEM (FIPS 203) + ML-DSA (FIPS 204) + SLH-DSA (FIPS 205) | secp256k1 ECDSA (Ethereum-native; Shor-vulnerable) |
| NIST PQC Standard | Yes — FIPS 203/204/205 (finalised August 2024) | No |
| HNDL Archive Exposure | None — no secp256k1 public key history | 7+ years (December 2017 – present; permanent) |
| Oracle Attack Surface | Not applicable (no oracle module with secp256k1 pushers) | OSM pusher keys; forged price → mass liquidations |
| Governance Quantum Risk | No secp256k1 governance votes | MKR + SKY dual governance circular paradox |
| Stablecoin Peg Quantum Risk | Not applicable | Vault collateral drain + oracle forgery = dual peg attack vector |
| Savings Rate Amplifier Risk | Not applicable | DSR/SSR compound-interest amplifier grows HNDL priority |
| Account Abstraction | ERC-4337 | No (Ethereum-native EOA model) |
| Protocol Age | Presale — TGE Q2 2026 | 7+ years live (genuine longevity advantage) |
| Audit Record | In progress | Exceptional — Trail of Bits, CertiK, formal verification |
| DeFi Integration | Building | Deep — Aave, Compound, Curve, Uniswap, Spark |
| Smart Contract Formal Verification | Pending | Yes — core Vat formally verified by Runtime Verification |
| PQC Migration Roadmap | Native (built on PQC from day one) | Not published as of September 2026 |
| Presale Price | $0.049999 (BMIC presale; bmic.ai) | MKR: market price; SKY: market price |
| Supply | 1.5B BMIC | MKR: ~870K; SKY: variable (24,000 SKY per MKR) |
| Raised | $530K+ presale (bmic.ai) | Legacy MKR raise (2017); ongoing protocol revenue |
In August 2024, MakerDAO began rebranding as Sky Protocol. DAI is transitioning to USDS (Sky USD) via a direct migration module (1:1 upgrade). MKR is transitioning to SKY (1:24,000 ratio). The Sky Endgame plan restructures governance, savings products, and protocol tokenomics. A reasonable question: does migrating from DAI to USDS help reduce quantum risk?
The answer is no. Here is why:
BMIC's NIST FIPS 203/204/205 infrastructure has no equivalent historical secp256k1 archive — it was designed for post-quantum security from inception. DYOR before any investment decision.
| Attack Layer | Key Type | HNDL Archive Depth | CRQC Impact | Severity |
|---|---|---|---|---|
| Vault CDP Collateral Keys | secp256k1 ECDSA (Ethereum) | 7+ years (Dec 2017+) | Direct collateral drain; DAI undercollateralisation; peg destabilisation | CRITICAL |
| Oracle Security Module (OSM) Pusher Keys | secp256k1 ECDSA (Ethereum) | 7+ years (continuous poke() archive) | Forged prices → mass Vault liquidations; OSM delay becomes precision weapon | CRITICAL |
| MKR Governance Voter Keys | secp256k1 ECDSA (Ethereum) | 7+ years (2017 MKR launch) | Permanent PQC migration block; malicious executive spell approval | CRITICAL |
| SKY Governance Voter Keys | secp256k1 ECDSA (Ethereum) | 2+ years (August 2024 Sky launch) | Dual governance circular paradox; SKY blocking vote simultaneous with MKR blocking vote | CRITICAL |
| DAI Savings Rate (DSR) Keys | secp256k1 ECDSA (Ethereum) | 5+ years (DSR since MCD Nov 2019) | DSR drain; compound-interest HNDL amplifier grows priority continuously | HIGH |
| Peg Stability Module (PSM) Admin Keys | secp256k1 ECDSA (Ethereum) | 4+ years (PSM since 2022) | Unauthorised stablecoin drain; unlimited DAI minting without collateral | HIGH |
| RWA Vault Admin Keys | secp256k1 ECDSA (Ethereum) | 3+ years (RWA vaults since 2023) | Unauthorised RWA collateral reallocation; DAI collateral quality degradation | HIGH |
No. MakerDAO / Sky Protocol inherits Ethereum's secp256k1 ECDSA infrastructure for all wallet signing operations. Shor's algorithm solves the elliptic-curve discrete logarithm problem in polynomial time on a CRQC. MakerDAO / Sky has not published a NIST PQC migration roadmap as of September 2026.
Oracle pusher addresses use secp256k1 ECDSA. A CRQC adversary can recover a pusher's private key from on-chain poke() transaction history. With the recovered key, the adversary submits fabricated collateral prices. The OSM 1-hour delay — designed to stop flash attacks — becomes a precision planning window for a quantum adversary who already holds the recovered key. At T+1 hour, the forged price cascades through Spotter → Vat → mass Vault liquidations. The OSM does not protect against quantum key recovery.
Every Vault owner uses a secp256k1 wallet for all CDP operations. A CRQC adversary recovering a Vault owner's private key from the 7+ year on-chain archive can call frob() to withdraw all locked collateral, wipe() the DAI debt position, and exit the Vault — draining the full position. Mass simultaneous Vault drain threatens DAI's over-collateralisation guarantee and peg stability.
Sky Protocol has two governance tokens: legacy MKR and new SKY. Any PQC migration executive spell must survive blocking votes from both. Both use secp256k1 on-chain governance. A CRQC adversary with recovered whale voter keys can permanently defeat governance at two simultaneous levels — triple-lock means: MKR blocking vote + SKY blocking vote + governance timelock. All secp256k1. All quantum-vulnerable.
Yes. The DSR and Sky Savings Rate compound balances continuously (chi accumulator). A CRQC adversary builds a recovery priority queue sorted by expected payout. A long-term DSR/SSR holder's position grows in value — and thus in attack priority — every block. The longer you hold without migrating to post-quantum key infrastructure, the higher your position climbs in the adversary's queue. BMIC implements NIST FIPS 203/204/205 with no equivalent historical exposure.
7+ years as of September 2026. Single-Collateral DAI launched December 2017. Every CDP open, collateral deposit, DAI draw, governance vote, oracle submission, and DSR entry since then has recorded secp256k1 public keys on Ethereum's permanent ledger. This archive is stored on every Ethereum full node worldwide and cannot be deleted, modified, or made private.
No. USDS uses the same secp256k1 wallet infrastructure as DAI. The migration module swaps tokens, not cryptographic signing algorithms. Every holder who signs the migration transaction creates a new HNDL broadcast. The dual-token structure (MKR + SKY) doubles governance attack surface. The 7+ year MakerDAO HNDL archive on Ethereum's ledger is permanent regardless of the Sky rebrand.
BMIC implements NIST FIPS 203 (ML-KEM / CRYSTALS-Kyber), FIPS 204 (ML-DSA / CRYSTALS-Dilithium), and FIPS 205 (SLH-DSA / SPHINCS+) — post-quantum standards finalised by NIST in August 2024. These are lattice and hash-based algorithms not efficiently solvable by Shor's algorithm. BMIC also implements ERC-4337 account abstraction with TGE Q2 2026. DYOR before any investment decision.