ledger-app-monero-1.42-vuln

CVE-2020-6861: Извлечение ключа трат в приложении Ledger Monero Репозиторий PoC для статьи: https://deadcode.me/blog/2020/04/25/Ledger-Monero-app-spend-key-extraction.html...

GHSA-WW9Q-8R59-XV46 Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

Summary A soundness vulnerability in the variable-base scalar multiplication gadget of halo2gadgets allowed a malicious prover to produce a valid proof for an Orchard Action with an under-constrained base point. Because this gadget enforces the diversified-address-integrity condition of the Orcha...