Quick answer: The Chamath Bitcoin hack claim, made on the Moonshots podcast released Oct. 21, 2026, says AI could break SHA-256, drain Satoshi’s wallet and send Bitcoin to zero. No public evidence shows AI can break SHA-256 or ECDSA. The real long-term risk is a large quantum computer attacking exposed public keys.
The Chamath Bitcoin hack claim has gone viral this week. Investor Chamath Palihapitiya said AI could break Bitcoin’s cryptography, drain Satoshi Nakamoto’s coins and push the price to zero.
The claim mixes up how Bitcoin works. No public evidence shows that AI can crack SHA-256 or the signatures that guard coins. However, a real long-term threat does exist, and it comes from quantum computers, not chatbots.
What happened: the Chamath Bitcoin hack prediction
Palihapitiya made the remarks on Moonshots with Peter Diamandis, episode #304, released Wednesday, Oct. 21, 2026. The segment runs from about 1:47 to 1:50, according to transcripts from RealAlpha and Exa.
First, he said of Bitcoin: “I think it’s capped.” Then he described an AI attack. “The most obvious thing to point it to would be to Satoshi’s wallet and to break SHA-256 and just kind of drain the wallet and then go short and then tell people that you did it. So then you’d make the money twice,” he said.
He also called a quantum-resistant upgrade “basically impossible,” because the Bitcoin community “can’t even agree where to meet.” His conclusion was blunt: “eventually it gets hacked and then it goes to zero.”
Notably, he said he no longer holds coins himself. “I don’t own crypto directly anymore,” he said, adding that his exposure comes through Digital Currency Group stock. Benzinga picked up the clip, and replies on X filled with rebuttals from Bitcoin users.
Why the Chamath Bitcoin hack scenario misreads the cryptography
The key error is the target. SHA-256 is a hash function. Bitcoin uses it for mining and for building addresses. In contrast, spending coins requires a valid ECDSA signature on the secp256k1 curve.
So breaking SHA-256 would not, by itself, unlock any wallet. An attacker would need to derive a private key from a public key. That is a different math problem.
Also, “Satoshi’s wallet” is not one wallet. The coins linked to Satoshi sit in many early outputs, mostly old 50 BTC block rewards. CoinDesk has put the Satoshi-attributed total at about 1.1 million BTC, as we noted in our Quantum Alliance report.
Finally, AI models do not do brute-force cryptanalysis any faster than ordinary computers. They can, however, help find bugs in software. That is a separate risk, and Bitcoin Core developers have already responded with a new security disclosure policy for AI-found bugs.
The real risk: quantum computers and exposed keys
Palihapitiya’s fear points at a genuine issue, just through the wrong door. A large, fault-tolerant quantum computer running Shor’s algorithm could, in theory, recover a private key from a public key.
Here is why early coins matter. Many of them use pay-to-public-key (P2PK) outputs, which show the full public key on the ledger. The draft BIP-360 lists P2PK outputs, “e.g. Satoshi’s coins,” as “fundamentally vulnerable to long exposure attacks.”
Meanwhile, hash functions hold up far better. Grover’s algorithm gives only a square-root speedup against hashes such as SHA-256. That still leaves a very large security margin.
Data and context
How big is the exposed pool? The Quantum Alliance, launched Oct. 16, says 6.04 million BTC, or 30.2% of supply, already have exposed public keys. Its members also stress that no existing quantum computer can break Bitcoin’s signatures today.
At $79,993 per BTC on CoinGecko (Oct. 26, 2026, 07:58 UTC), that pool would be worth roughly $483 billion. Bitcoin was down about 0.7% over 24 hours at that time.
The timing of the clip matters too. Bitcoin is trading near $80,000 ahead of this week’s Fed decision, as covered in our Fed week preview. In a nervous market, a “goes to zero” soundbite from a famous investor travels fast.
On the upgrade question, Palihapitiya has a point about speed. Bitcoin changes slowly and needs broad consensus. Even so, work has started. BIP-360 proposes a new output type, Pay-to-Merkle-Root, that removes the quantum-vulnerable key path. It is still a draft.
What to watch next
- BIP-360 progress: whether the proposal gains reviewers, test code and wallet support.
- The frozen-coins debate: whether developers agree on what to do with exposed coins that are never moved, including Satoshi’s.
- Quantum hardware milestones: new qubit and error-correction results from Google, IBM and others.
- AI bug reports: whether AI-assisted audits surface real flaws in Bitcoin software, which is the more immediate AI risk.
For holders, the practical step is simple. Avoid reusing addresses, since reuse exposes your public key. Keep an eye on wallet updates as quantum-safe options arrive.
Chamath Bitcoin hack FAQ
Can AI break SHA-256 and drain Satoshi’s Bitcoin?
No public evidence shows that AI can break SHA-256 or ECDSA as of Oct. 26, 2026. Also, breaking SHA-256 alone would not unlock coins, because spending needs a valid ECDSA signature.
What did Chamath Palihapitiya say about Bitcoin?
On Moonshots EP #304, released Oct. 21, 2026, he said Bitcoin is “capped” and that “eventually it gets hacked and then it goes to zero.” He added that he no longer owns crypto directly.
Are Satoshi’s coins at risk from quantum computers?
In theory, yes, in the long run. Early P2PK outputs show public keys, and BIP-360 lists them as vulnerable to long-exposure quantum attacks. No current quantum computer can carry out that attack.
Sources
- RealAlpha: Chamath thinks Bitcoin is capped (transcript)
- Benzinga: Bitcoin goes to zero after a hack, Chamath predicts
- Coindaro: Chamath Bitcoin zero AI hack fact-check
- BIP-360: Pay-to-Merkle-Root (P2MR)
- CoinGecko: Bitcoin price
This article is for information only and is not financial advice. Do your own research before you invest.
