Buterin Warns EU Chat Control Invites Exploits by Weakening Encryption

Vitalik Buterin, one of the creators of

, has strongly condemned the European Union’s proposed Chat Control law, cautioning that it poses a serious risk to digital privacy and could introduce major security flaws. This legislation, officially titled the Regulation to Prevent and Combat Child Sexual Abuse (CSAR), would require messaging services—regardless of whether they use encryption—to scan private messages for evidence of child exploitation. Buterin contends that such actions undermine the core values of digital privacy, stating that “you cannot make society secure by making people insecure.” He stressed that any backdoors intended for law enforcement would eventually be exploited by bad actors, putting everyone’s security at risk.

If implemented, the Chat Control law would force encrypted messaging apps like WhatsApp, Signal, and Telegram to monitor messages, images, and even metadata before encryption occurs. Detractors, including privacy advocates and cybersecurity professionals, believe this would fundamentally weaken encryption, which is essential for secure online communication. Buterin’s objections echo widespread concerns that the law favors surveillance over privacy, creating vulnerabilities that hackers could exploit. “Any policy that claims to protect society by reducing individual security actually does the opposite,” he said.

Controversy has grown after a leaked draft of the law revealed that EU interior ministers want to exempt themselves, intelligence agencies, and military personnel from the surveillance rules they intend to impose on the public. Buterin called out this inconsistency, pointing out that lawmakers seem willing to subject citizens to surveillance but not themselves. “The fact that government officials want to exempt themselves from their own law is telling,” he posted on X. This double standard has fueled public distrust, with organizations like FightChatControl.eu reporting that only seven EU countries—Austria, Finland, and the Netherlands among them—have officially opposed the proposal, while 12 others, including France, Spain, and Denmark, are in favor. Germany, which holds a decisive 65% of the EU’s population needed for the law to pass, has yet to take a position.

Buterin’s remarks have struck a chord with Web3 supporters, who argue that the Chat Control proposal could drive more users toward decentralized platforms. Hans Rempel from Diode and Elisenda Fabrega from Brickken cautioned that the law could fragment the EU’s digital landscape and diminish its role in shaping global privacy standards. They observed that the Web3 principle of “not your keys, not your data” may appeal to those disillusioned by centralized surveillance, though this could also limit the EU’s influence on international privacy policies.

This ongoing debate highlights the broader conflict between privacy and security in the digital era. While supporters of Chat Control present it as essential for fighting child abuse, critics question both its broad reach and its technical practicality. Buterin’s perspective reflects a growing belief that privacy must be safeguarded, even as governments confront social issues. “Everyone deserves privacy and security in their personal communications, without backdoors that can inevitably be hacked,” he insisted.

As the EU considers this legislation, its decision will have significant consequences for digital freedoms and the future of encryption. With Germany’s stance still undecided and public resistance mounting, the fate of the law remains uncertain. If adopted, it could pave the way for widespread surveillance; if rejected, it may reaffirm the EU’s dedication to privacy as a basic right.