Vultisig's August App Updates Halted Retries Tied to Key-Share Flaw

Vultisig's August updates to its iOS and Android apps stopped signing retries after a malicious-party error tied to a flaw that ChainSecurity said could expose a wallet's full private key. A threshold-signature wallet distributes key shares across devices, which work together to sign transactions. ChainSecurity's Oct. 21 disclosure described an attack that required an attacker to first compromise one signer. The compromised signer could send crafted messages during a signing attempt and observe whether another device returned an error. Repeated responses could reveal bits of the other device's reusable seed.

Source: TokenPost