A 7 year Ledger bug lets attackers rebuild a private key from five signatures in seconds

Zilliqa has suspended native transactions after discovering that roughly five affected signatures from the same private key may provide enough information to reconstruct that key, creating a recovery problem that an ordinary transfer cannot safely solve. The vulnerability is confined to Schnorr signatures generated for native, non-EVM transactions through the Zilliqa Ledger app, according to […] The post A 7 year Ledger bug lets attackers rebuild a private key from five signatures in seconds app