Vitalik Buterin urges calm as AI raises new fears over Bitcoin and Ethereum cryptography security
Key Summary
Ethereum co-founder Vitalik Buterin warned that AI-driven advances in mathematics could weaken crypto signatures and post-quantum defenses, urging holders to reduce exposure but cautioning against panic migrations. He singled out lattice-based cryptography as a potential risk, citing the need for more robust security margins.
Immediate Concerns
Buterin warned crypto holders to reduce exposure where practical, but cautioned against rushing funds into new wallets, arguing that migration mistakes pose a more immediate danger than any demonstrated cryptographic break. He advised users to keep funds in addresses that have never signed a transaction, as their public keys remain hidden behind address hashes.
Lattice-Based Cryptography
Buterin singled out lattice-based cryptography, including ML-DSA, as an area where AI-driven mathematical discovery could erode assumed security margins over the next two years. This raises a harder problem for an industry already preparing for quantum computers. NIST standardized ML-DSA in 2024 as a post-quantum digital-signature algorithm.
Hash-Based Security
Ethereum developers have been moving toward hash-only systems over the past year, avoiding lattice-based signatures and reducing reliance on lattice-based commitments inside zero-knowledge proofs. Hash-based signature systems, including WOTS and SPHINCS, play a larger role in this direction because they depend less on mathematical structures that could yield unexpected shortcuts to attackers. Buterin argued that structured mathematical objects create more room for AI-assisted discovery.
Broader Consequences
Buterin warned that systems relying on public-key encryption, used in secure messaging, anonymous communications, and other systems, may eventually need substantially larger security parameters if AI improves cryptanalytic techniques. This could have far-reaching consequences for secure messaging systems, VPNs, Tor, encrypted web traffic, and privacy protocols.