Brute force of public keys' search span

[JFWooten4]

Note

BlockTransfer operates a number of well-known accounts, which serve as the backbone for on-chain records. If an adversary were to crack or otherwise access the keys for these wallets, they could theoretically issue unlimited new tokens of any serviced assets—in the case of the Issuer wallet. On a less-extreme scale, they could crack open the company treasury account and drain all the marketable commodities independent of TAD3. And even a medium-level breach of the Distributor account could liquidate large chunks of issuer assets not yet claimed on-chain, which would generally devastate the DEX price given the concentration in Cede or private insiders.

Right now, these accounts use Ed25519 public keys, which can be brute-forced by supercomputers using Pollard rho in about 1.3 trillion years. That aggressive approximation presumes a multi-hundred-million-dollar build running on at least $25 million of electricity per year.

While unlikely, a breach here could compromise all served assets with no intrusion or detectable surface whatsoever until it is too late.