Small Leaks, Billions of Dollars: Cryptographic Attacks on MPC Wallets
Demonstrates practical cryptographic key-exfiltration attacks against Multi-Party Computation (MPC) algorithms securing billions in cryptocurrency wallets.
Summary
Multi-Party Computation in Digital Asset Custody
Multi-Party Computation (MPC) threshold signatures secure hundreds of billions of dollars across major institutional cryptocurrency exchanges, custody providers, and fintech banks.
Auditing Popular MPC Threshold Protocols
Nikolaos Makriyannis and Oren Yomtov analyze widespread implementations of threshold ECDSA and EdDSA protocols, uncovering subtle cryptographic leakage channels.
Practical Key Exfiltration with Minimal Signatures
The researchers present three distinct cryptographic attacks against different protocol implementations, demonstrating complete private key recovery in 256 signatures, 16 signatures, and a single signature.
Securing Threshold Cryptography Deployments
Remediating MPC vulnerabilities requires strict zero-knowledge proof verification, rigorous parameter validation, and robust fault-injection defenses during distributed key signing.
Related talks
DCGVR Village·1 hr 14 min
Sam Colaizzi
Sam Colaizzi examines cryptocurrency hype, blockchain security pitfalls, and realistic threat models for decentralized systems.
Blockchain Village·31 min
Peiyu Wang
Demonstrates vulnerability discovery and exploitation techniques targeting insecure cryptocurrency software wallets.
Blockchain Village·31 min
Peiyu Wang
A live walkthrough demonstrating vulnerability identification, reverse engineering, and exploitation of flawed crypto wallet applications.