News · via CERT/CC
VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the…