SlowMist: A critical vulnerability was found in the elliptic encryption library, which may lead to private key leakage


SlowMist security team revealed a critical vulnerability in the widely used elliptic encryption library (GHSA-vjh7-7g9h-fjfh). Attackers can extract private keys with just one signature by constructing specific inputs, which could lead to the theft of digital assets or identity credentials. This vulnerability may affect blockchain applications and digital identity systems that rely on this encryption library.