Avalanche founder Emin Gün Sirer warned on October 9, 2026, that artificial intelligence models are far more likely to exploit system-level software vulnerabilities in blockchain libraries, wallets, and protocols than to crack elliptic curve cryptography.
AI Threat Shifts From Cryptography to Code Vulnerabilities
Sirer stated on X (@el33th4xor) that ongoing debate over AI breaking Elliptic Curve Digital Signature Algorithm (ECDSA) signature schemes overlooks immediate operational risks. He argued that AI-driven vulnerability discovery tools will allow malicious actors to detect hidden bugs in system code and dependencies, enabling attackers to steal billions of dollars long before cryptographic algorithms fall.
The warning follows ongoing scrutiny of the XRP Ledger, where developers issued an emergency xrpld 3.4.1 software update on September 25, 2026. That release introduced the fixBatchV1_2 amendment to resolve stability issues without reported mainnet fund losses, coming after XRP Ledger patched a 10-year bug. Although Sirer did not demonstrate an active exploit on the XRP Ledger, his remarks highlighted the security risks associated with unpatched software layers.
Industry Leaders Divided Over AI Cryptography Risks
Sirer's assessment highlights a broader rift among industry leaders regarding AI capabilities. Ethereum co-founder Vitalik Buterin recently warned that AI-driven mathematical discovery could threaten lattice-based cryptography within two years, while Ethereum researcher Justin Drake cautioned that AI could eventually compromise ECDSA. Conversely, Cardano founder Charles Hoskinson dismissed those timeline predictions as speculative.
Sirer acknowledged that cryptographic threats cannot be entirely ruled out, but insisted existing code bases face a far more urgent hazard from AI automated discovery.
Key Takeaways:
- Avalanche founder Emin Gün Sirer states AI will exploit software bugs long before breaking ECDSA cryptography.
- XRP Ledger operators recently deployed the xrpld 3.4.1 emergency patch and fixBatchV1_2 amendment on September 25, 2026.
- Ethereum co-founder Vitalik Buterin warned AI could threaten lattice cryptography within two years, while Charles Hoskinson called such timelines speculative.
Why It Matters
As blockchain networks expand institutional features, automated AI vulnerability scanning fundamentally alters the speed at which software flaws are weaponized. Developers who deploy closed-source or delayed security updates risk exposing production networks to zero-day exploitation before node operators can complete critical upgrades. Monitoring how quickly open-source teams patch AI-discovered vulnerabilities will be essential for assessing operational security across major networks.
