Breaking MPC Wallets and Digital Custodians - HITB2023HKT

Explore the critical vulnerabilities in Multi-Party Computation (MPC) wallets and digital asset custody solutions in this Hack In The Box Security Conference presentation. Dive into the world of Threshold Signature Schemes (TSS) and learn about TSSHOCK, a set of new key extraction attacks that can compromise the security of major blockchain ecosystems. Witness live demonstrations of how attackers can steal asset vaults in seconds, despite multiple security audits. Gain insights into the vulnerabilities present in popular open-source TSS frameworks in Golang and Rust, which are based on Gennaro & Goldfeder's papers. Benefit from the expertise of lead blockchain researcher Huu Giap Nguyen and security engineer Anh Khoa Nguyen as they share their findings from their BlackHat USA 2023 presentation, highlighting the urgent need for improved security measures in digital asset financial ecosystems.