TSSHОCK Billion-Dollar Wallet Hack

TSSHОCK: Breaking MPC Wallets and Digital Custodians for $BILLION$ Profit Duy Hieu Nguyen | Lead Security Engineer, Verichains Anh Khoa Nguyen | Security Engineer, Verichains Huu Giap Nguyen | Head of Technology, Verichains Thanh Nguyen | Co-Founder, VNSecurity & Verichains Anh Quynh Nguyen | Doctor, Nanyang Technological University Date: Thursday, August 10 | 1:30pm–2:10pm (Islander FG, Level 0) Format: 40-Minute Briefings Tracks: Cryptography, Application Security: Offense Would you like to hear how an attacker can steal BILLIONS of dollars worth of cryptocurrency from MPC digital custodian vaults and wallets by exploiting our new how–do–you–attack? At the core of modern Multi-Party Computation (MPC) wallets and digital asset custody solutions of major blockchains is a cryptographic protocol named Threshold Signature Scheme (TSS). Today, many institutions, including banks, exchanges, and wallets, rely on TSS to enable a group of parties to authorize transactions by generating signatures without having to reveal their individual secret keys. Consequently, the security of TSS is of utmost importance to many digital asset financial ecosystems. Most TSS implementations rely on Gennaro & Goldfeder's papers, which use homomorphic encryption and zero-knowledge proofs to secure digital assets worth billions of USD. Unfortunately, despite having undergone multiple security audits, these implementations – including the de-facto open-source TSS frameworks in Golang and Rust – are still vulnerable to three new key extraction attacks that our team at Verichains has discovered, which we have named TSSHОCK. TSSHОCK completely breaks the security of TSS, with proof of concept exploitation demonstrating a full private key extraction by a single malicious party in 1–2 signing ceremonies on various popular wallets, non-custodial key infrastructure, and cross-chain asset management protocols. The attack leaves no trace and appears innocent to the other parties. Attackers can exploit these flaws to steal billions of dollars worth of cryptocurrency from both individual users and institutions. In this talk, we will share our new key extraction attacks and demonstrate TSSHОCK on a blockchain testnet so the audience can witness how the attacker could steal asset vaults in seconds.

На скриншоте показано описание доклада Black Hat о TSSHОCK — атаках на MPC-кошельки и цифровых кастодианов, позволяющих извлекать приватные ключи и красть миллиарды долларов. Шутка в абсурдно прямом обещании украсть BILLIONS и в реакции «Is it even meme?» на то, что это выглядит как готовый сюжет для мема, хотя является реальным техническим описанием конференции.

• @dev_meme / 5310 2023-07-24