You can't crack a 256-bit key directly. But it's possible there is some mistake in the implementation, either leaking data or choosing keys badly. Or maybe there's just a mole.
That’s pretty much the root issue. Just like with physical security, the devil’s in the details.