Phantom

Standard

Quantum

Bitcoin

<p>Binance founder Changpeng Zhao has warned that artificial intelligence can harm Bitcoin users through leaked personal data and social engineering without breaking the cryptocurrency’s cryptography, according to posts from CoinMarketCap and Bitcoin Archive.</p>
<div id="cn-block-summary-block_e78387e68eee14d4784efafaa11531eb" class="cn-block-summary">
 <div class="cn-block-summary__nav tabs"><span>Summary</span>
 </div>
 <div class="cn-block-summary__content">
  <ul>
   <li>CZ warned that leaked personal data can enable AI phishing without breaking Bitcoin’s cryptography.</li>
   <li>OWASP’s guidance compares specific algorithms and key sizes, leaving the bank-encryption claim unverified.</li>
   <li>Coinbase’s 2025 breach exposed customer information without compromising private keys or login credentials.</li>
   <li>Zscaler documented fake Ledger verification pages designed to steal wallet recovery phrases.</li>
  </ul>
 </div>
</div>
<p>CoinMarketCap described Zhao’s warning as a concern about more advanced phishing enabled by exposed information, while Bitcoin Archive <a href="https://x.com/BitcoinArchive/status/2113639842634453050" rel="noopener noreferrer nofollow">attributed</a> to him a claim that banks rely on weaker encryption than Bitcoin. Neither post in the screenshot provides the algorithms, key lengths, or bank systems needed to check that comparison.</p>
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>LATEST: 🚨 CZ says AI doesn’t need to crack Bitcoin’s encryption to cause damage, warning that leaked data already enables more advanced phishing and social engineering attacks. <a href="https://t.co/elSMeeBePL" rel="noopener noreferrer nofollow">pic.twitter.com/elSMeeBePL</a></p>— CoinMarketCap (@CoinMarketCap) <a href="https://x.com/CoinMarketCap/status/2113626003150901333?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">October 23, 2026</a>
  </blockquote>
 </div>
</figure>
<h2 class="wp-block-heading" id="fbi-guidance-documents-ai-assisted-financial-deception">FBI guidance documents AI-assisted financial deception</h2>
<p>The FBI’s December 2024 <a href="https://www.ic3.gov/psa/2024/psa241203" rel="noopener noreferrer nofollow">warning</a> describes criminals using generative AI to make fraud more convincing and reach potential victims with less effort. Its examples include fake cryptocurrency investment websites, fabricated social media profiles, and chatbots that direct visitors toward malicious links.</p>
<p>Criminals can use generated text and translations to remove spelling and grammar mistakes that might otherwise expose a scam, the agency said. Its guidance describes synthetic images used for false identities and fraudulent identification documents, alongside video calls impersonating executives or other authority figures.</p>
<p>You might also like: <a href="https://crypto.news/bitcoin-saylor-closed-doors-strategy-buy/" rel="noopener noreferrer nofollow"> Bitcoin gets Saylor’s ‘closed doors’ tease after Strategy’s $22M buy </a></p>
<p>The FBI warned that cloned audio can imitate relatives seeking emergency payments or be used to impersonate bank customers. Such examples concern deception and identity abuse; the advisory does not report AI breaking Bitcoin’s cryptographic protections.</p>
<p>For households, the agency recommends agreeing on a private word or phrase to check a relative’s identity. It advises limiting publicly available personal images and voice recordings that criminals could use to create convincing impersonations.</p>
<h2 class="wp-block-heading" id="bitcoin-security-claims-require-a-specific-comparison">Bitcoin security claims require a specific comparison</h2>
<p>OWASP’s Application Security Verification Standard <a href="https://github.com/OWASP/ASVS/blob/master/5.0/en/0x92-Appendix-C_Cryptography.md" rel="noopener noreferrer nofollow">lists</a> cryptographic strength by algorithm and key size, using a comparison table drawn from guidance issued by the US National Institute of Standards and Technology. The table places AES-128, 3,072-bit RSA and elliptic-curve cryptography using keys of 256 to 383 bits in the same 128-bit security category.</p>
<p>OWASP’s framework does not rank banks and Bitcoin as two uniform systems. Its guidance calls for organizations to identify and document their cryptographic assets, including algorithms, keys, and certificates, and assess them as cryptographic research and requirements change.</p>
<p>The bank comparison attributed to Zhao remains an assertion without that system-level evidence. The two posts do not identify a bank, describe a cryptographic weakness, or document an AI attack that recovered a Bitcoin private key.</p>
<p>Quantum computing presents a separate technical question in NIST’s published guidance. In August 2024, the agency finalized three post-quantum standards intended to protect electronic information against attacks from sufficiently capable quantum computers. Its announcement describes machines that operate differently from conventional computers and could defeat widely used cryptographic methods.</p>
<p>NIST <a href="https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards" rel="noopener noreferrer nofollow">said</a> the standards cover general encryption and digital signatures, with applications ranging from confidential communications to online commerce. The agency encouraged administrators to begin integrating the standards because deployment takes time.</p>
<h2 class="wp-block-heading" id="coinbase-disclosed-how-stolen-records-supported-impersonation">Coinbase disclosed how stolen records supported impersonation</h2>
<p>A US exchange has documented a customer-data attack with a similar mechanism. In May 2025, Coinbase said criminals bribed overseas support personnel to obtain information they could use while pretending to represent the company, as crypto.news previously reported in its account of the <a href="https://crypto.news/how-the-coinbase-scam-unfolded-and-what-it-means-for-the-exchange/" rel="noopener noreferrer nofollow">customer data breach</a>.</p>
<p>Coinbase’s own disclosure listed contact details, government identification images, masked financial identifiers and account information among the stolen records. The company said the attackers did not obtain private keys or login credentials, and the stolen access did not itself allow them to move customer funds.</p>
<p>The exchange rejected a ransom demand and announced a <a href="https://crypto.news/coinbase-refuses-20m-ransom-launches-matching-bounty-on-blackmailers/" rel="noopener noreferrer nofollow">matching $20 million bounty</a> for information leading to the attackers’ arrest and conviction. Its disclosure described safeguards including extra identity checks on large withdrawals and scam warnings for flagged accounts.</p>
<p>Coinbase <a href="https://www.coinbase.com/blog/protecting-our-customers-standing-up-to-extortionists" rel="noopener noreferrer nofollow">said</a> its voluntary reimbursement covered retail customers who sent funds to the scammer as a direct result of the incident before the announcement, subject to review. The disclosure did not establish that AI was used in those attacks.</p>
<h2 class="wp-block-heading" id="ledger-phishing-pages-sought-wallet-recovery-phrases">Ledger phishing pages sought wallet recovery phrases</h2>
<p>Hardware-wallet users have faced impersonation through search advertising. A Sep. 25 investigation by Zscaler, covered in an Oct. 11 article about <a href="https://crypto.news/ledger-faces-fake-website-warning-amid-86m-theft-probe/" rel="noopener noreferrer nofollow">fake Ledger websites</a>, described fraudulent Google advertisements leading users toward a counterfeit wallet interface.</p>
<p>Zscaler <a href="https://www.zscaler.com/blogs/security-research/threat-actors-use-google-ads-target-ledger-users" rel="noopener noreferrer nofollow">documented</a> a campaign it analyzed in August, with redirects passing through Google Cloud Storage and Vercel before displaying a phishing page hosted through Google Sites. Researchers observed redirect addresses changing every 15 to 20 minutes.</p>
<p>The fake verification process asked visitors for their recovery phrases, which attackers could use to access wallets without possessing the physical devices, the researchers said. Zscaler’s account described credential theft and did not establish AI involvement in the campaign.</p>
<p>Ledger’s own campaign warnings describe physical letters that ask recipients to scan a QR code or visit a website before entering their 24 recovery words. The company says anyone holding that phrase can access the accounts created from it, and warns users never to enter it into a computer.</p>
<p>The wallet maker’s <a href="https://www.ledger.com/phishing-campaigns-status" rel="noopener noreferrer nofollow">guidance</a> says it does not send emails asking customers to update device firmware, enable two-factor authentication, or take similar steps. Its warning page includes examples of fraudulent letters and emails used to solicit recovery information.</p>
<p>Read more: <a href="https://crypto.news/phantom-kalshi-prediction-markets-us/" rel="noopener noreferrer nofollow"> Phantom brings Kalshi markets to US users with $0.02 contract fees </a></p>

Bitcoin security debate turns to AI phishing after CZ’s warning

Table of Contents

crypto.news

Other articles published on Oct 23, 2026

Join our free newsletter for daily crypto updates!