Anthropic says this makes deliberate backdoors less plausible. It describes no new attack or curve weakness and says users need take no action.
The Ethereum connection runs through EIP-7951, which specifies verification of signatures using P-256, also called secp256r1. It names Apple Secure Enclave, Android Keystore and FIDO2/WebAuthn devices as relevant hardware. This connects wallet authorization with signing capabilities built into devices and authenticators.
EIP-7951’s motivation lists device-native signing, multifactor authentication and simpler key management as uses for account abstraction.
Ethereum’s account documentation distinguishes private keys that sign transactions from public information used to verify them; contract accounts are controlled by code.
EIP-7951’s P256VERIFY operation takes a message hash, a signature and a public key, then checks the signature’s validity. The reconstructed public seed is separate from those private signing credentials.
P-256 also differs from secp256k1, the curve already used in Ethereum. The relevance is to P-256-compatible signing, rather than every Ethereum wallet.
Anthropic reports that candidate 876 also yielded a prime-order curve of the required size, leaving selection criteria unclear. The number of generation runs and the origin of P-256’s base point, a separate fixed mathematical point, remain unknown.
