ecdsa

Ethereum co-founder Vitalik Buterin posted on the X platform, stating that AI-accelerated mathematical research may pose new security threats to existing cryptographic systems, especially lattice-based cryptographic schemes, including ML-DSA and fully homomorphic encryption (FHE). He believes that advancements in AI in the field of mathematics over the next two years could significantly undermine the practical security of lattice cryptography, and ECDSA may face the risk of being compromised sooner than expected.Vitalik pointed out that over the past year, the Ethereum Lean roadmap has gradually shifted towards pure hash cryptographic schemes, avoiding the use of lattice-based signatures and related zero-knowledge proof structures. He suggested prioritizing the use of hash cryptography whenever feasible and adopting more conservative security parameters for lattice cryptography; privacy protocols should avoid storing encrypted information directly on-chain, and multi-signature wallets should prioritize off-chain signature confirmations. Additionally, Vitalik advised users, when operationally convenient, to store funds in addresses that have not initiated transactions to reduce potential risks, but he does not recommend users immediately migrate assets on a large scale. He emphasized that the migration process itself also carries risks, and his own losses due to migration errors have even exceeded the losses from past hacking attacks.

Cryptography researcher Justin Drake posted on the X platform, calling for the blockchain industry to calmly plan a "bunker mode." He suggested that large holders move most of their funds to new addresses that have never signed transactions, with public keys still hidden behind hashes. Subsequently, each time a signature is made, the remaining funds should also be transferred to the new address.He believes that AI is driving rapid breakthroughs in the field of mathematics, and ECDSA could potentially be cracked by classical algorithms before the quantum computing "Q-Day," possibly occurring in months rather than years, allowing private keys to be recovered in about a week using large GPU clusters. Drake also emphasized that there is no need for panic and hasty migration, stating that Binance, Bitbank, Robinhood, Bitfinex, and Tether could take this opportunity to strengthen their cold wallets.

Former hedge fund manager and CNBC host Jim Cramer stated that due to concerns about quantum computing threatening Bitcoin's security, he plans to sell all of his BTC holdings. His statement stems from an interview with IBM Chairman and CEO Arvind Krishna, who said that investors should be wary of the challenges quantum computing may pose to modern cryptography in the next 3 to 4 years. Cramer believes that quantum computing could threaten the Bitcoin network in a similar timeframe. However, no one has independently confirmed how much BTC he holds or whether he has completed the sale.After his statement, Bitcoin continued to trade normally around $63,764, with some market participants viewing his comments as a "reverse Cramer" signal. Bitcoin uses the ECDSA signature mechanism based on the secp256k1 curve, and theoretically, a sufficiently powerful quantum computer could use Shor's algorithm to derive the private key from the public key. The risk is mainly concentrated on addresses with exposed public keys, including reused addresses, early wallet formats, and the brief time window after a transaction is broadcast but not yet confirmed. Researchers estimate that about 6 to 7 million BTC, accounting for approximately 30% of the supply, may fall into this category. Google Quantum AI estimated in March this year that breaking the relevant cryptographic mechanisms could require fewer than 500,000 physical qubits, reducing the previous estimate by about 20 times. However, current quantum systems typically only have hundreds to thousands of physical qubits, with even fewer logical qubits that have higher reliability. Most researchers expect that truly capable quantum computers for cryptographic breaking may not appear until the 2030s or even 2040s, making Cramer's 3-year prediction significantly earlier than most technological expectations.

Bitcoin security researcher and Ethereum Foundation researcher Justin Drake published a discussion on the timeline for quantum computing to crack Bitcoin.Justin Drake believes that the findings of Google's quantum AI white paper are conservative. "By 2032, quantum computers will have at least a 10% chance of recovering the secp256k1 ECDSA private key from leaked public keys. While it still feels unlikely that a cryptographically relevant quantum computer (CRQC) will emerge before 2030, it is undoubtedly time to start preparing."Justin Drake also stated that achieving commercially viable Bitcoin proof of work through Grover's algorithm will not happen in the short term. "We are talking about decades, or even centuries later. This observation should help shift the focus of the discussion onto ECDSA and Schnorr. As an unofficial Bitcoin security researcher, I still believe that Bitcoin proof of work has failed due to the reduction in the security budget."

Ethereum co-founder Vitalik Buterin released the "Quantum Roadmap" this Thursday, proposing several improvement plans to address blockchain quantum security vulnerabilities, including hash signatures, recursive STARKs, native account abstraction, and protocol-level signature aggregation. The core goal is to replace the currently vulnerable ECDSA encryption architecture.Among these, the "frame transactions" proposal has been included in the discussion agenda for the Ethereum upgrade version Hegota, expected to be launched in the second half of 2026, with hopes of implementation within this year. Vitalik warned last November that quantum computers could break Ethereum's existing security model by 2028.The Ethereum Foundation has established a special post-quantum team, set up a $1 million bounty, and initiated bi-weekly technical seminars. Researcher Justin Drake emphasized that in a highly decentralized ecosystem, formulating a binding "official roadmap" is actually not feasible.

According to official news, Optimism has released the quantum-resistant roadmap for Superchain, with the core content announcing the gradual phasing out of externally owned accounts (EOA) based on ECDSA signatures over the next decade. The specific plan is that by January 2036, EOA transactions using ECDSA signatures on the OP mainnet and superchain will be deprecated, and all such accounts must delegate their key management to smart contract accounts that support post-quantum signatures.The roadmap covers both user and consensus levels. At the user level, account abstraction technology will be utilized, through standards like EIP - 7702, to gradually delegate signature authority from EOA to smart accounts capable of verifying post-quantum signatures. At the consensus level, L2 sequencers and batch submitters will migrate to post-quantum signatures, while also calling for Ethereum itself to establish a timeline to transition validators from BLS signatures and KZG commitments to post-quantum algorithms. The entire upgrade process will be coordinated through a hard fork, providing the ecosystem with a decade to achieve a smooth transition.

ChainCatcher news, Paradigm CTO Georgios Konstantopoulos stated that a year of research found no significant breakthroughs in account abstraction, suggesting it should have been set as a native feature of Ethereum in its early years.Vitalik Buterin responded that full account abstraction has not been achieved, requiring ECDSA or intermediaries, with intermediaries relying on privacy risks and censorship resistance, while quantum security and privacy protocols still pose challenges.

ChainCatcher message, Ethereum founder Vitalik responds to X user Paolo Rebuffo's comments on Pectra's implementation of account abstraction, pointing out that the account abstraction process is currently only halfway complete. He stated that the ultimate goal is to make non-ECDSA (Elliptic Curve Digital Signature Algorithm) accounts the mainstream account type. These accounts include features such as multi-signature, key changes, quantum resistance, and privacy protocols. Recently, significant progress has been made in simplifying the 7701 standard to promote the realization of this goal.

ChainCatcher news, Google has announced the launch of its first quantum chip, Willow, raising concerns about the potential decryption of private keys to steal user funds.Bernstein analyst Gautam Chhugani wrote in a report that the 105-qubit chip is still far from the millions of qubits needed to actually attack the Bitcoin Elliptic Curve Digital Signature Algorithm (ECDSA) and the Secure Hash Algorithm (SHA-256).The analyst stated, "Should Bitcoin contributors start preparing for a quantum future? Yes, but any actual threat to Bitcoin seems to be decades away."It is reported that ECDSA is a cryptographic algorithm used to protect private keys and enable digital signatures for Bitcoin transactions. SHA-256 ensures the integrity of the Bitcoin ledger by hashing transaction data, playing a crucial role in the mining process through Bitcoin's proof-of-work mechanism.

ChainCatcher message, Ethereum founder Vitalik posted on X: "Quantum computing is the biggest driving force. Whether we like it or not, externally owned accounts (EOA) will eventually disappear in the future, as quantum computing will ultimately break ECDSA."