• 34ºc, Sunny

Slow Mist: A critical vulnerability has been discovered in the elliptic cryptographic library, which could lead to the disclosure of private keys

The SlowMist security team published a disclosure that a critical vulnerability (GHSA-vjh7-7g9h-fjfh) was discovered in the widely used elliptic cryptographic library. An attacker can extract the private key by constructing a specific input with only one signature, which could lead to the theft of digital assets or identity credentials. The vulnerability could affect blockchain applications and digital identity systems that rely on this cryptographic library.