SlowMist: A critical vulnerability was found in the elliptic encryption library, which may lead to private key leakage

This article is machine translated
Show original

According to ChainCatcher news, the Slowmist security team has disclosed a critical vulnerability (GHSA-vjh7-7g9h-fjfh) in the widely used elliptic encryption library.

Attackers can extract the private key with just one signature by crafting specific input, which may lead to the theft of digital assets or identity credentials. This vulnerability may affect blockchain applications and digital identity systems that rely on this encryption library.

Source
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments