A debate emerged on X about whether AI-driven mathematical breakthroughs could theoretically weaken ECDSA cryptography protecting Bitcoin and Ethereum, with researcher Justin Drake warning of a worst-case timeline of months. However, no verified AI attack has recovered private keys from public keys, and experts like Vitalik Buterin recommend against panic-driven fund migrations, instead advocating for security best practices like avoiding address reuse and protecting recovery phrases.
A Chinese company secretly acquired CryptoBilis, an authorized Ledger reseller in Southeast Asia, and implanted spy chips in hardware wallets before shipping them, allowing attackers to steal private keys and drain cryptocurrency wallets across multiple blockchains. Hundreds of users were affected, with one victim losing $5.3 million despite following security best practices.
Dread's onion service was compromised through a vulnerability in Gobalance load-balancing software that incorrectly handled Tor's Ed25519 private keys as 32-byte instead of 64-byte keys, allowing recovery of the master secret key from published descriptors. The flaw existed unnoticed for nearly four years.