Vitalik Buterin urges calm over AI risks to Bitcoin and Ethereum cryptography

Ethereum co-founder Vitalik Buterin warned that AI-driven mathematical advances could weaken existing crypto signatures and some post-quantum defenses. On Oct. 7, Buterin advised crypto holders to reduce exposure where practical. However, Buterin warned against rushing funds into new wallets because migration mistakes pose a more immediate danger than any demonstrated cryptographic break.

Ethereum researcher Justin Drake had called for the industry to prepare for heightened cryptographic threats, including moving assets toward fresh addresses whose public keys have never been exposed onchain. Drake raised the possibility that AI advances could accelerate mathematical attacks on the elliptic-curve cryptography used by Bitcoin and Ethereum. OpenAI published new mathematical results generated by an internal frontier model on Oct. 6, including machine-generated proofs formalized in Lean. OpenAI did not report any attack on blockchain cryptography. Neither Buterin nor Drake pointed to evidence that ECDSA has been practically broken.

Buterin singled out lattice-based cryptography, including ML-DSA, as an area where AI-driven mathematical discovery could erode assumed security margins over the next two years. Lattice-based systems are among the leading technologies designed to replace cryptography vulnerable to sufficiently powerful quantum computers. The National Institute of Standards and Technology standardized ML-DSA in 2024 as a post-quantum digital-signature algorithm. Buterin argued that the mathematical structures supporting such systems may contain undiscovered weaknesses. Buterin compared the risk with advances in integer factorization, such as the general number field sieve, which dramatically reduced the work required to attack RSA compared with naive methods and forced much larger keys. Buterin said AI could compress decades of mathematical progress into a much shorter period, potentially uncovering comparable advances against elliptic curves or lattice problems. Buterin wrote that if AI delivers 50 years of mathematics in two years, those advances could substantially improve attacks on lattice cryptography.

The concern helps explain Ethereum developers' growing preference for cryptographic designs based primarily on hash functions. Buterin said Ethereum's lean roadmap has moved toward hash-only systems over the past year. Buterin said the roadmap avoids lattice-based signatures such as ML-DSA and Falcon and reduces reliance on lattice-based commitments inside zero-knowledge proofs. Hash-based signature systems, including WOTS and SPHINCS, play a larger role because those systems depend less on mathematical structures that could offer attackers unexpected shortcuts. Buterin argued that structured mathematical objects create more opportunities for AI-assisted discovery. Elliptic curves rely on group operations and other exploitable mathematical relationships. Lattice systems depend on difficult problems whose practical resistance could change if researchers discover more efficient attacks. Hash functions are designed to expose far less structure.

However, public-key encryption used in secure messaging, anonymous communications, websites and other systems cannot generally be built from hash functions alone. Those applications require mathematical structures with a trapdoor that allows authorized users to decrypt information. Buterin suggested that systems relying on those structures may eventually need substantially larger security parameters. Buterin said multiplying key sizes by as much as ten could become reasonable if AI sharply improves cryptanalytic techniques. Secure messaging systems, VPNs, Tor, encrypted web traffic and privacy protocols could face similar trade-offs between performance and wider security margins.

Buterin said users who can easily keep funds in addresses that have never signed a transaction may gain protection because address hashes hide the public keys. An account's public key becomes visible once the account sends a transaction. Multisig operators could reduce exposure by gathering signatures offchain and rotating signer keys after operations, limiting how long exposed keys remain useful if ECDSA security deteriorates. However, Buterin warned against treating those precautions as an emergency migration order. Buterin said failed migrations have personally cost Buterin more money than hacks. Wallet providers, custodians and protocol developers must prepare for faster-moving cryptographic risk while avoiding security upgrades that introduce operational failures.