Ethereum co-founder Vitalik Buterin warned on October 7 that AI-driven mathematical breakthroughs could weaken lattice-based cryptography within two years, and could also threaten the Elliptic Curve Digital Signature Algorithm (ECDSA) that secures Bitcoin and Ethereum wallets sooner than expected, according to a report from BeInCrypto. His comments came in reply to Ethereum researcher Justin Drake, who has called on the industry to prepare for a crypto "bunker mode." The warning follows a related scare days earlier, when MetaMask began exiting Ethereum validators after a staking incident.
What Did Vitalik Buterin Actually Say?
Replying to Drake on X, Buterin said most people have assumed elliptic curves are vulnerable to future attacks while hash functions and lattice-based cryptography stay safe — he now questions the lattice half of that assumption. In his own words, shared in a post on X, he does not recommend anyone rush to move funds today, but says the industry should take the risks from AI-accelerated math seriously and minimize exposure to both quantum-vulnerable and AI-vulnerable cryptography.
Why Lattice Cryptography Is Suddenly in Question
Lattice math underpins the Module-Lattice-Based Digital Signature Algorithm (ML-DSA), a signature standard built to resist quantum computers, and it also powers Fully Homomorphic Encryption (FHE), which allows computation directly on encrypted data. Buterin compared the risk to factoring, where a mathematical shortcut called the number field sieve forced RSA encryption keys to grow larger over several decades. If AI compresses 50 years of mathematical progress into two years, he argued, lattice-based schemes could face a similar shock. Hash-based cryptography, which has no exploitable algebraic structure, looks safer by comparison — which is why Ethereum's long-term Lean roadmap has spent the past year shifting toward hash-based signature schemes such as SPHINCS and WOTS.
Does This Put Bitcoin at Risk Too?
Bitcoin relies on the same ECDSA elliptic-curve signatures, so Drake's warning extends directly to BTC as well as ETH. Drake said ECDSA could break within months in a worst-case scenario, pointing to Project11's "risq list," a public tracker of Bitcoin keys already exposed on-chain. Wallets holding under 50 BTC get partial cover from what Drake called "Satoshi's shield" — roughly 20,000 exposed addresses tied to Bitcoin creator Satoshi Nakamoto, each holding 50 BTC, that attackers would likely target first. Drake also urged major custodians, including Binance, Bitbank, Robinhood, Bitfinex, and Tether, to harden their offline cold storage.
What Should Crypto Holders Do Right Now?
Buterin's practical advice is to keep funds in addresses that have never sent a transaction, where that is easy to do, since an unused address keeps its public key hidden rather than exposed on-chain. He cautioned that he has personally lost more money to botched wallet migrations than to every hack combined, meaning a panicked move could cause more harm than the theoretical threat itself. For multisig wallets, he favors offchain confirmation flows that would degrade to a single signer rather than open access if ECDSA ever failed. For privacy protocols, he recommends sending encrypted notes offchain through a third-party channel instead of posting them onchain. For anything meant to last, Buterin suggested multiplying key sizes by ten.
Is This Just a Crypto Problem?
No. Buterin noted the stakes reach beyond blockchains, since public-key encryption also secures messaging apps, VPNs, and general website access, all of which depend on structured math rather than hashes alone. The warning adds to a string of security alerts this week: Europol separately flagged that some Bitcoin wallets have no quantum-safe migration path at all. Drake has called for Ethereum's roadmap timelines to be revisited and accelerated in response, though neither researcher has set a hard deadline beyond the two-year estimate for lattice cryptography specifically — both frame this as risk management, not an imminent emergency.