Vitalik said users should not rush to move funds to new wallets, but should take seriously the risks that AI-accelerated mathematical computation may pose to cryptography. According to PANews, he said dependence should be reduced on cryptographic schemes that may be vulnerable not only to quantum attacks but also to AI attacks.

He identified ML-DSA, fully homomorphic encryption, and lattice-based cryptography as new core risk areas. Vitalik said this is another reason, beyond the quantum threat, why ECDSA security may break down faster than expected, which has led to suggestions to use new addresses.

He said many people still believe elliptic curve algorithms may be broken while hash algorithms and lattice-based algorithms remain safe, but AI progress in mathematics over the next two years could significantly weaken the practical security of lattice-based algorithms. Vitalik recommended choosing hash-based schemes over lattice-based ones when possible, being highly cautious about parameter sizes for any lattice-based scheme, and avoiding putting encrypted notes on-chain for privacy protocols by using off-chain transmission through third-party mechanisms instead.

He also said that if it is not inconvenient, storing funds in an address that has not been used for any transaction is a good idea. For multisig wallets, he said off-chain confirmation is preferable to on-chain confirmation because signatures from signers’ wallets would not be exposed on the public network. If ECDSA is broken earlier than expected because of AI progress, he said the multisig setup could at least degrade to a 1-of-1 mode, where the party collecting signatures controls the funds, rather than allowing funds to be taken by anyone.

Earlier, Justin Drake said ECDSA could be broken within months in the worst case and suggested large holders move assets to new addresses.