It's interesting that they're using secp256k1 (as Bitcoin does) for performance reasons (regarding Bitcoin, Satoshi mentioned in early messages that he did choo

It's interesting that they're using secp256k1 (as Bitcoin does) for performance reasons (regarding Bitcoin, Satoshi mentioned in early messages that he did choose EC because it would help keep the size of the blockchain not too big). I wonder if Bitcoin's use of EC is "giving a boost" to EC... Anyway... TFA states this: "We are aware of theoretical weaknesses in secp256k1" What are the theoretical weaknesses in EC secp256k1?