Are you worried that advances in artificial intelligence (AI) or quantum computers might one day break the cryptographic signatures that protect your crypto wallets? This article explains how digital signatures work, why they could become vulnerable, and what practical steps you can take to safeguard your assets.
What digital signatures are and how they protect your coins
When you send a cryptocurrency transaction, you need to prove that you own the address you’re spending from. This proof comes from a digital signature, which is created using a private key that only you should know. The signature is verified with the matching public key, which is part of the address visible on the blockchain.
The most common algorithm for these signatures is the Elliptic Curve Digital Signature Algorithm (ECDSA). ECDSA relies on the mathematical difficulty of solving the discrete logarithm problem on an elliptic curve. In plain terms, it’s extremely hard for a computer to deduce the private key from the public key, which keeps your funds safe.
Two emerging technologies could change that picture:
- AI‑accelerated mathematics: Large language models and other AI systems are getting better at solving complex mathematical problems, including those underlying ECDSA.
- Quantum computing: Quantum algorithms, such as Shor’s algorithm, can theoretically break the same problems that ECDSA depends on, given a sufficiently powerful quantum computer.
If either AI or quantum computers become capable of breaking ECDSA, an attacker could forge signatures and move funds from any address whose public key is known.
Real‑world illustration
In October 2026, Dragonfly managing partner Haseeb Qureshi criticized Ethereum researcher Justin Drake’s suggestion of a “bunker mode” – moving assets to fresh addresses to avoid exposure. Qureshi called this approach “cryptographic doomerism,” arguing that it only works while the coins stay unmoved and would be useless if a large‑scale breach occurred. He proposed a “Cryptographic Recovery Mode,” a hash‑based backup signature system that validators could use to restore access if signatures were compromised.
Qureshi’s comments highlight a growing debate within the blockchain community about whether simple address migration is enough, or whether more systemic safeguards are needed.
What this means for you
If you hold cryptocurrency, the potential for signature‑breaking attacks creates two main concerns:
- Exposure of public keys: Any address that has ever been used to receive funds reveals its public key on the blockchain. If that public key can be derived from the address format (as is the case for most Bitcoin and Ethereum addresses), it becomes a target.
- Mass migration risk: Moving funds to new addresses (the “bunker mode”) can reduce exposure, but it does not protect against a scenario where an attacker can forge signatures for many addresses at once and sell the coins on the market.
In practice, most users will never need to worry about a sudden AI breakthrough. However, understanding the risk helps you make informed decisions about wallet choice, address reuse, and participation in networks that may adopt proactive recovery mechanisms.
How to evaluate the safety of your holdings
- Check address reuse: Avoid reusing the same address for multiple transactions. Fresh addresses keep the public key hidden until you first receive funds.
- Use wallets with post‑quantum support: Some newer wallets are experimenting with lattice‑based or hash‑based signatures that are believed to be quantum‑resistant.
- Follow network upgrades: Keep an eye on proposals like Bitcoin’s BIP‑360 or Ethereum’s potential shift to alternative signature schemes. Adoption of these upgrades can significantly reduce risk.
- Consider custodial options cautiously: Exchanges often hold large amounts of BTC in addresses that expose public keys. If you keep funds on an exchange, you rely on the platform’s security measures, which may include their own recovery plans.
- Stay informed about research: Follow reputable researchers (e.g., Justin Drake, Vitalik Buterin) and organizations monitoring AI and quantum progress. Their assessments can guide when to take action.
FAQ
Will AI really break ECDSA soon?
Researchers like Justin Drake have warned that AI could accelerate the discovery of mathematical shortcuts that weaken ECDSA, potentially within months rather than years. While no public AI system has demonstrated this capability yet, the possibility is taken seriously by the community.
Is moving my coins to a new address enough?
Using a fresh address removes the immediate exposure of a reused public key, but it does not protect against a scenario where many addresses are compromised simultaneously. It is a useful mitigation but not a complete solution.
What is a “Cryptographic Recovery Mode”?
Proposed by Haseeb Qureshi, this concept involves a hash‑based backup signature that can be linked to an address. If the primary signature algorithm fails, validators could use the backup to restore access, similar to a password reset for a wallet.
Should I switch to a post‑quantum wallet now?
Post‑quantum wallets are still experimental and may not be widely supported. If you are comfortable with your current security practices and prefer stability, you can wait for broader adoption while staying alert to network upgrades that incorporate quantum‑resistant signatures.
This article references reporting from cointelegraph.com.
