Vultisig August update blocks private key leak from malicious ECDSA messages
AI summary
Vultisig, a crypto wallet, patched a flaw in August that could have let an already-compromised signer recover a critical private key. The bug involved malicious ECDSA messages exploiting an ignored stop condition in the application. A wallet-level key leak would put user funds at risk, so traders holding assets in self-custody wallets should verify they are running patched versions.
