Bitcoin’s quantum plan assumes some algorithms break. AI just weakened one in 60 hours

BIP-360, the proposal to give bitcoin quantum-resistant addresses, specifies three algorithms NIST has already standardized, and includes several deliberately so users have fallbacks if one is later broken by quantum or classical advances.

What changed is the speed of the classical side. BIP-361, the companion proposal that would freeze more than a third of bitcoin’s supply, argues that the migration window is closing because cryptographic attacks are improving by up to 20-fold. Anthropic’s results align with that trend, with a model behind it.

Against HAWK’s smallest parameter set, Anthropic said the expected cost of recovering a key fell from about 2^64 operations to 2^38. Larger keys remain impractical to attack, but doubling key sizes to compensate removes most of what made HAWK attractive.

The company disclosed the attack to HAWK’s authors in June and coordinated publication with NIST’s public mailing list.

A second result improved attacks on a deliberately weakened version of AES, the cipher used across the industry to encrypt wallet files, by factors of 200 to 800.

Importantly for crypto developers, Anthropic said the model produced smaller improvements, under tenfold, against Poseidon, the hash function that underpins many zero-knowledge proof systems, including those securing rollups and privacy protocols.