CVE-2020-22741

An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature...

CVE-2020-22741

CVE-2020-22741 affects Xuperchain 3.6.0. The vulnerability arises in the multisignature flow where obtaining a partial signature can allow an attacker to recover arbitrary users’ private keys. The connected documents confirm the issue and its impact (private key recovery), but do not provide expl...