CVE-2023-33242
CriticalCVSS 9.6Exploitation Probability (EPSS)
Elevated risk61th percentile - higher than 61% of all known CVEs
Summary
Crypto wallets implementing the Lindell17 TSS protocol may allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt, totaling 256 bits. This issue arises from not adhering to the security proof's assumptions regarding handling aborts after a failed signature.
Risk Assessment
Organizations using these wallets are at risk of losing private keys, which can lead to theft of funds and data breaches. Attackers may exploit this vulnerability to gain control over cryptocurrency assets.
Recommendation
It is recommended to update crypto wallets to a version that fixes this vulnerability and to review security procedures related to signature handling. Additional measures to protect private keys should also be considered.
Original NVD description (English source)
Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signature attempt (256 in total) because of not adhering to the paper's security proof's assumption regarding handling aborts after a failed signature.