Claude traced the NIST P-256 curve seeds to 1997 timestamps fed into lrand48, not a secret phrase
An internal Anthropic model worked out in under half an hour that the NSA-supplied seeds for P-192 through P-521 came from the C lrand48/drand48 generator seeded with Unix timestamps from 1997 to 1998, so the team claimed Filippo Valsorda's bounty and donated the tripled $36,864 to Let's Encrypt's nonprofit, ISRG. It's not a break: Valsorda says it leaves barely 30 bits of freedom, ruling out a hidden backdoor, and no one needs to change anything (Filippo's writeup).
