Justin Drake Urges Gradual Crypto Wallet Moves Against Hypothetical AI Attacks
No practical attack on Bitcoin or Ethereum wallet keys has been demonstrated. The proposed precaution carries its own risk: losing funds during a migration.
Loading page…
No practical attack on Bitcoin or Ethereum wallet keys has been demonstrated. The proposed precaution carries its own risk: losing funds during a migration.
Listen to this story
Ethereum researcher Justin Drake is urging large holders to reduce exposure to a speculative route to wallet compromise: an AI-assisted mathematical breakthrough that could derive private keys from exposed public keys using ordinary computers. He recommends gradually moving assets to addresses whose public keys have not appeared on-chain; Vitalik Buterin supports reducing exposure where practical but warns that migration mistakes can cause losses. No such attack has been demonstrated, and the warning is separate from Ethereum’s quantum-security roadmap, which targets December 2029.
On Ethereum, accounts that have sent a transaction have exposed their public keys, the information Drake’s hypothetical shortcut would need.
The signature system also protects stablecoins and tokenized funds on Ethereum, extending the potential exposure beyond ether.
Buterin cautioned against rushed migrations, saying he has lost more money in botched migrations than in hacks.
Crypto holders are being urged to reduce their exposure to a hypothetical attack that would bypass the need for quantum computers. Ethereum researcher Justin Drake called for calm preparations on October 7, warning that AI-assisted mathematics could break Bitcoin and Ethereum wallet signatures in a worst-case scenario within months, according to CoinDesk.
Drake’s recommendation was aimed first at large, sophisticated holders: gradually shift funds to fresh addresses whose public keys have never appeared on the blockchain. Ethereum co-founder Vitalik Buterin supported reducing that exposure where practical, but warned against rushing. No practical attack on Bitcoin or Ethereum wallet keys has been demonstrated.
A wallet’s private key is a secret number used to authorize payments. Its related public key lets the network check those approvals. Creating the public key is easy; recovering the private key from it is supposed to require an impractical amount of computing work. That one-way relationship is what Drake worries AI might help an attacker undermine.
The signature mathematics uses elliptic curves, mathematical structures that Drake says contain patterns a powerful AI could learn to exploit. His concern is a new mathematical shortcut, not simply a faster quantum machine. In that hypothetical scenario, an attacker could recover the secret key and spend the coins using ordinary computers.
The proposed precaution withholds the public key—the starting point such an attack would need. On Ethereum, an account that has sent a transaction has revealed that key. Stablecoins and tokenized funds on the network also depend on the same signature system, extending the concern beyond ether itself.
Buterin’s response did not reject the precaution. It challenged the urgency with which holders might carry it out: mistakes during wallet migrations can themselves cause losses. He grounded that warning in his own experience rather than treating moving funds as a risk-free defensive step.
I personally have lost more money in botched migrations than I have lost in all hacks combined
Vitalik Buterin, on X, quoted by CoinDesk
Ethereum’s existing timetable addresses quantum computing: the Ethereum Foundation has set December 2029 as its target for moving the network to quantum-resistant cryptography. Drake’s worst-case warning concerns an earlier attack using ordinary computers. Buterin also warned that AI-driven mathematical advances could seriously weaken some proposed quantum-resistant replacements over the next two years.
Those include lattice-based designs, built around mathematical problems believed to resist both ordinary and quantum computers. Buterin instead favors relying as much as possible on hash functions, which turn data into digital fingerprints designed to be hard to reverse, The Decoder reported. He sees fewer openings for unexpected shortcuts there, while acknowledging that hash-based designs could also face attacks.
Loading discussion...
Join the conversation
Explain whether early precautions outweigh the risk of mistakes.
Be the first to share a perspective or an experience.
Reader comments
Newest comments first. Replies stay oldest first.