
Venkata Satish Guttula 🛰️@snakeyesV1
CERT/CC’s Oct 26 advisory describes a hardened-derivation flaw in Fireblocks’ mpc-lib, CVE-2026-90975. A compromised descendant signer share plus its chain code can expose that party’s ancestor shares. This does not independently recover a full spendable key; MPC threshold protection remains. CERT listed no vendor fix at publication. https://kb.cert.org/vuls/id/701544
0000080
3.3K followersView on X
