CVE-2023-33242

Summary

CVE-2023-33242 is a vulnerability affecting crypto wallets using the Lindell17 Threshold Signature Scheme (TSS) protocol. These wallets may allow unauthorized access to the full ECDSA private key by permitting an attacker to extract a single bit in every signature attempt, amounting to 256 bits in total. The issue arises due to these wallets failing to comply with the security proof assumptions for handling aborts after unsuccessful signature verification. This vulnerability poses a significant risk to users' digital assets and highlights the importance of adhering to protocol security requirements.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.