BIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addresses

Affected versions of bip322 accepted a BIP-322 proof created with an attacker-controlled private key as a valid signature for an unrelated victim P2WPKH or P2SH-P2WPKH address, allowing complete authentication bypass in applications using verifysimple, verifysimpleencoded, verifyfull, or...

RUSTSEC-2026-0334 BIP-322 address ownership verification bypass for P2WPKH and P2SH-P2WPKH addresses

Affected versions of bip322 accepted a BIP-322 proof created with an attacker-controlled private key as a valid signature for an unrelated victim P2WPKH or P2SH-P2WPKH address, allowing complete authentication bypass in applications using verifysimple, verifysimpleencoded, verifyfull, or...

PT-2026-108805

Affected versions of bip322 accepted a BIP-322 proof created with an attacker-controlled private key as a valid signature for an unrelated victim P2WPKH or P2SH-P2WPKH address, allowing complete authentication bypass in applications using verify simple, verify simple encoded, verify full, or veri...