TSSHOCK: Breaking MPC Wallets and Digital Custodians for $BILLION$ Profit
summary
Claims private key extraction from popular GG18/GG20 threshold ECDSA stacks via three 0‑day flaws, demonstrated against real MPC wallet/custodian deployments. Vulnerabilities named Alpha Shuffle, C-split, and C-gas exploit ambiguous encoding, enlarged challenge spaces, and reduced DLN iterations; many Go and Rust libraries are vulnerable. Attack requires only one malicious MPC party and often a single signature, a proof‑of‑concept runs a malicious node against live bridges and rollups and silently recovers keys and drains funds.
AI-written summary · about
chapters (16)
- 0:00TSSHOCK research intro
- 0:25MPC and threshold signatures
- 1:27GG18 and GG20 protocols
- 2:31Signing ceremony and MPC
- 3:59DN proof mechanism deep dive
- 7:13Non-interactive DN proof flaws
- 8:19Three attacks for key extraction
- 9:04Alpha Shuffle attack
- 12:40C-Split attack flaws
- 15:31C-Gas attack details
- 16:54Core issues in attacks
- 17:37Affected vendors list
- 18:22Demo on MPC wallets
- 21:52Demo on Ronin Network
- 24:03Key takeaways
- 25:26Conclusion
related talks
37mPETs of the world unite! Conquer the middle ground in the performance vs...
40mBlockchain Security Guarantees and Exploits
34mCryptographic Vulnerabilities in Threshold Wallets
01h 08mSecure Computation 1
23mWhere are Your Keys
46mLessons From Two Years of Crypto Audits
26mBaby Sharks: Small Subgroup Attacks on DKG Implementations
43mOutsmarting Smart Contracts