My rough math based on average difficulty stats suggests that Bitcoin mining crossed the total 2**96 hashes milestone very recently? Seems like a good reason to insist on (close to) 128 bit security (ie. @drakefjustin was right)