Small Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets
summary
Research shows four novel exploits (three zero days) that recover MPC wallet private shares from popular implementations, with Lindell 2017 and GG18/GG20 as primary targets and 16 vendors affected; two vendor production environments are breached and full PoC exploits are released. Attacks abuse homomorphic-encryption flow and malformed range proofs by swapping moduli, crafting weak RSA-style n values, and exploiting missing zero-knowledge proofs to leak bits via homomorphic encryption outputs and reconstruct keys using the Chinese Remainder Theorem after MTA rounds.
AI-written summary · about
chapters (9)
- 0:00Cryptocurrency wallet vulnerabilities
- 1:06Multi-party computation risks
- 3:13MPC wallet attack threat model
- 5:21Modulo, homomorphic encryption, ECDSA
- 8:34Exploiting Lindell 17 protocol
- 18:06Attacking GG8 and GG20 protocols
- 30:29DIY MPC protocol compromise
- 32:34Research impact and conclusion
- 33:41Q&A on disclosure and EdDSA
related talks
34mCryptographic Vulnerabilities in Threshold Wallets
54mYes, you too can break crypto Exploiting common crypto mistakes
54mBroken Crypto is Broken
44mCryptography Pitfalls
51m48 Dirty Little Secrets Cryptographers Don’t Want You To Know
42mBreak Crypto like a Pro!
41mFault Attacks & Side Channels
40mBlockchain Security Guarantees and Exploits