Vulnerability in BitGo’s TSS Wallet Exposes Users’ Private Keys

Vulnerability in BitGos TSS Wallet Exposes Users Private Keys

According to reports, the digital asset security platform Fireblocks has discovered a serious vulnerability in the Threshold Signature Scheme (TSS) wallet of BitGo, a cryptocurrency hosting company, which exposes its users’ private keys to the risk of being attacked by potential hackers. It is reported that BitGo immediately suspended the affected wallet service in December 2022 after learning of the vulnerability, which is known as the “BitGo Zero Proof Vulnerability”. The company subsequently released a patch in February 2023 to address the labeling issue and notified customers to update their systems by March 17. (The block)

Fireblocks reported a vulnerability in the BitGo TSS wallet, which has been fixed

Analysis based on this information:


Fireblocks, a digital asset security platform, has reported a serious vulnerability in BitGo’s Threshold Signature Scheme (TSS) wallet. TSS is a popular multi-signature technology that allows a group of users to control a single account. The vulnerability, known as the “BitGo Zero Proof Vulnerability”, exposes the private keys of users to potential hackers.

The vulnerability was discovered by Fireblocks in BitGo’s TSS wallet and reported to BitGo immediately. In response, BitGo suspended the affected wallet service in December 2022 and released a patch in February 2023 to address the issue. BitGo also notified its customers to update their systems by March 17.

The vulnerability is a serious concern for users of BitGo’s TSS wallet, as private keys are the keys to access cryptocurrency transactions. Where hackers gain access to private keys, they are able to steal cryptocurrency from users’ accounts. With the emergence of cryptocurrency as a valuable asset, the issue of digital asset security has become more important, with many exchanges and wallets reporting attempts by hackers to breach their systems.

The discovery of this vulnerability reflects the importance of regular system maintenance and the need for prompt response to detected security issues. The incident also emphasizes the importance of security measures to protect digital assets, especially given the growth of decentralized finance and non-fungible tokens.

In summary, the BitGo Zero Proof Vulnerability poses a significant security risk to users of BitGo’s TSS wallet. Digital asset security platforms such as Fireblocks play an important role in discovering and reporting such vulnerabilities. The incident highlights the need for regular system maintenance, prompt response to detected security issues, and the importance of security measures in protecting digital assets.

This article and pictures are from the Internet and do not represent Fpips's position. If you infringe, please contact us to delete:https://www.fpips.com/6289/

It is strongly recommended that you study, review, analyze and verify the content independently, use the relevant data and content carefully, and bear all risks arising therefrom.