Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-22 | 1 | General1 |
| 2026-05-25 | 1 | Active Exploitation1 |
BREAKING: THORChain hit by $10.7M theft after leaving CVE-2023-33241 patch undeployed for 9 days, marking its third major breach in 5 years. https://threatcluster.io/cluster/thorchain-hit-by-107-million-theft-due-to-unapplied-patch-9d7ff6e6
Post summary
The article reports a $10.7 million theft from THORChain caused by an unpatched CVE‑2023‑33241, confirming active exploitation in the wild.
@nakajo 公式発表出てましたね。原因はGG20のTSSが狙われたっぽい。 具体的な攻撃手法はまだ開示されてないようですが、CVE-2023-33241 or TSSHOCK系なのか、またはそれ以外なのかは今後の開示待ちですかね。 https://thorchain.org/blog/thorchain-exploit-report-1
Post summary
The post reports that CVE-2023-33241 has been officially announced, with preliminary indications pointing to an attack on GG20 TSS, but no technical details, exploit code, or mitigation information are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gg18_project | gg18 | - | - | - |
| App | gg20_project | gg20 | - | - | - |