Vultisig fixes ECDSA bug that exposed private keys

Community Trust Score Verified 83 % Real Verified 35 votes Updated 6 minutes ago ChainSecurity disclosed on October 21 a historical flaw in the ECDSA signing implementation of the Vultisig crypto wallet that allowed the recovery of a full private key. The vulnerability required one compromised signer and the transmission of multiple malicious signing messages to exploit a mishandled stop signal in the application’s code. Vultisig operates as a multi-party computation (MPC) wallet, distributing signing authority among key shares so that enough shares can cooperate to produce a standard blockchain signature without assembling the full private key during normal operation.