Vitalik Buterin: AI's threat to cryptography in two years

Disclaimer: Content does not constitute investment advice. Trading involves risks—please invest with caution!

Vitalik Buterin: AI's threat to cryptography in two years

2026-10-08 12:16:35

Bookmark

Ethereum co-founder Vitalik Buterin issued a warning: AI progress may disintegrate the cornerstone of blockchain security within two years.

Ethereum co-founder Vitalik Buterin recently issued an urgent warning, pointing out that advances in artificial intelligence technology may undermine the cryptographic foundation that supports blockchain security in about two years. This threat puts wallet signatures, smart contract authentication, and decentralized AI coordination infrastructure in the same risk window.

This warning is mainly aimed at asymmetric cryptographic schemes, especially the Elliptic Curve Digital Signature Algorithm (ECDSA), which currently protect every Ethereum address and transaction. If an AI-assisted cryptanalysis tool or quantum accelerated reasoning tool with sufficient capabilities appears on this timeline, the trust layer that makes the blockchain ultimately meaningful will need to be replaced urgently rather than routine maintenance.

What the "two-year cryptography timetable" really means

Core concerns: Buterin's concerns focus on AI accelerating attacks on elliptic curves and hash-based cryptographic assumptions, but this is not a confirmation that a breakthrough has occurred.
Planning constraints rather than deadlines: The two-year outlook is a planning constraint rather than a deadline: the agreement team needs to deploy an upgrade path before any capability threshold is crossed.
Exposed aspects of decentralized AI networks: Decentralized AI networks that rely on verifiable credentials and signature model outputs face the same exposure risks as wallet infrastructure.

Buterin characterized the issue as a forward-looking risk rather than a demonstrated capability. This distinction is crucial: AI-assisted lattice attacks or neural side-channel technologies remain active research areas rather than deployed vulnerability exploitations. However, the gap between AI's research and production tools has narrowed significantly, which is what drives a two-year planning window rather than a ten-year migration plan.

The most threatened assumptions and Ethereum's response strategy

The most vulnerable at present are those that are deeply embedded in Ethereum's current design: the secp256k1 curve used for externally owned account signatures, and the Ketcak-256 hash function widely used in state three-pronged trees and contract storage. Buterin has previously hinted that Ethereum has viewed quantum security and AI as dual pressures on its crypto stack, and has positioned post-quantum readiness as a protocol-level priority rather than an application-level consideration.

Responses in the Ethereum roadmap include a move to a STARK-based certification system. The system relies on a hash function that is believed to be more resistant to quantum and AI-assisted attacks than elliptic curve solutions. This work has been embedded in the "Streamlined Ethereum Roadmap" aimed at achieving native STARK and quantum resistance, positioning cryptographic agility as an infrastructure primitive rather than an after-the-fact upgrade patch.

Why decentralized AI infrastructure faces the same risks

去中心化AI网络、计算市场和链上代理框架在其运营的每一层都依赖密码学原语：签署推理请求、验证模型来源、认证GPU运营商身份以及锚定治理投票。如果保护这些操作的签名方案成为可行的攻击目标，那么可验证AI计算的整个信任模型将与钱包安全性一同崩溃。

处理模型证明、训练数据来源和推理结果验证的链上AI协调协议，都将签名数据视为真理基础。因此，对ECDSA类签名的可信威胁，也是对任何尚未迁移到后量子或基于哈希的身份验证的去中心化AI系统的可信威胁。Buterin的警告适用于整个AI-密码栈，而不仅仅是传统的钱包基础设施。

从事AI代理框架和计算网络的协议开发者应将密码敏捷性——即在不重新部署核心合约的情况下交换签名方案的能力——作为首要的设计要求。硬编码secp256k1验证的智能合约系统会随着AI能力前沿的移动而累积越来越多的迁移债务。

未来两年的监测信号

值得跟踪的具体指标包括：

关于AI辅助格归约攻击针对ECDLP实例发布的基准测试；
NIST后量子算法的采用时间表；
推进可容纳替代签名验证方案的账户抽象方案的以太坊改进提案（EIP）。

钱包基础设施团队还应密切关注涉及密钥管理和恢复假设的协议级中立性问题的EIP进展。

对于计算市场协议和去中心化AI网络，近期的优先任务是审计哪些链上验证步骤今天依赖于ECDSA，并确定是否可以在任何能力阈值被跨越之前，将这些步骤抽象为可升级的验证器合约背后。两年的窗口期虽短，需要立即规划，但也足够长，使得如今正在交付密码敏捷架构的团队不必处于追赶截止日期的境地。

Disclaimer:

All content published on this website, including hyperlinks, related applications, forums, blogs, and other media accounts, originates from third-party platforms and their users. CoinMarketInsight makes no representations or warranties of any kind regarding the website or its content. All blockchain-related data and materials are provided for informational and research purposes only and do not constitute financial, legal, or investment advice. Users and third parties are solely responsible for the content they publish. CoinMarketInsight shall not be liable for any losses arising from the use of this website. You should exercise caution and conduct your own independent research, review, analysis, and verification before making any decisions.

Read Full Article