Fireblocks Discloses Critical Vulnerability in BitGo Ethereum Wallets – Decrypt
Editor's note: This story has been updated to include comments from BitGo.
The cryptography research team at blockchain infrastructure provider Fireblocks today released the details of avulnerability in BitGos Ethereum wallets that use the firms Threshold Signature Scheme (TSS).
The vulnerability first came to light in early December, just over a month after the service was made public.
After confirming the technical details of the vulnerability, BitGo suspended the service on December 10, releasing a patch update in February. The Palo Alto-based firm also required its clients to update to the latest version by March 17.
According to Fireblocks, the vulnerability could have enabled an attacker to extract a full private key using a single signature and a few seconds of computation, bypassing all of BitGo's security features.
Although Fireblocks claimed that it had followed a coordinated disclosure process between its research team and BitGos security team, BitGo strongly refuted Fireblocks' characterization of events. In a statement provided toDecrypt, BitGo accused Fireblocks of "turning a known gap into a publicity stunt," adding that, "This is not how coordinated disclosures are supposed to work."
BitGo stated that "The specific MPC wallet type in question is in early access and remains in early access, only unlocked for 20 developers." BitGo added that the wallet in question was a "pre-release product" and that Fireblocks had mischaracterized it as being in production, "because they tested it on mainnet using the BitGo website (ignoring all warnings about it being early-release)."
Digital asset custodian and security company BitGo, whose customers include some of the crypto industry's big names, such as Bitstamp, Pantera Capital, and eToro, among others, first introduced TSS wallets in June 2022, with support for Ethereum wallets added in October.
The vulnerabilitydubbed BitGo Zero Proof Vulnerabilitystemmed from a missing implementation of mandatory Zero-Knowledge Proofs in the BitGo TSS wallet protocol, which uses the Elliptic Curve Digital Signature Algorithm (ECDSA).
The Zero Proof vulnerability was initially discovered in BitGoJS, the SDK that BitGo clients use to interact with the BitGo API. BitGoJS is used for performing signatures on the client side.
Exploiting the vulnerability on the SDK allows an attacker to steal the private key share used by the client, regardless of their key storage methods and security measures.
Any patch introduced into the library should protect wallets that implement it," Fireblocks head of technology, research and innovation Arik Galansky told Decrypt. "However, it still leaves the concern if anyone has already exploited the vulnerability in the past and extracted the key while it was using a vulnerable library."
As attacks on the crypto industry continue to accelerate, licensed custodians are entrusted with securing billions of dollars in user funds, Fireblocks co-founder and CTO Idan Ofrat said in a statement shared with Decrypt. The vulnerability is a result of the wallet provider failing to follow a well-reviewed cryptographic standard.
Although wallets generated following the patch should be safe, according to Fireblocks, the keys of any BitGo Ethereum TSS wallet generated prior to the update should be considered potentially exposed. Any funds in those wallets should therefore be considered at risk and immediately moved to a secure wallet.
In a statement, BitGo accused Fireblocks of "a litany of false claims intended to damage BitGos reputation, as well as BitGos actual and potential commercial relationships," adding that the company is "pursuing all legal remedies, including but not limited to damages, injunctive relief, court costs and attorneys fees."
Visit link:
Fireblocks Discloses Critical Vulnerability in BitGo Ethereum Wallets - Decrypt
- Ethereum News Today: US Ethereum ETFs Hit $16.57B AUM With $8.69B Net Inflows in 1 Year - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum Consolidates Below $4,100 as 70% Rally Sparks Institutional Accumulation and 5.8% ETH/BTC Drop - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: BlackRocks ETHA ETF Reaches $10B in 251 Days, Third-Fastest ETF Growth as Institutional Demand Surges Post-SEC Approval - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum ETFs Mark 1st Anniversary with $8.64B Inflows, 40% Growth from Early 2025 - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum Surpasses $3,600 on $332M ETF Inflows, On-Chain Metrics Signal BTC Outperformance - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum's Mid-$3,400 Dip Seen as Temporary Correction Amid $332M ETF Inflow and Whale Buying - AInvest - July 24th, 2025 [July 24th, 2025]
- BlackRocks Ethereum ETF Rockets to $10B in 10 Days Third-Fastest Ever - Cryptonews - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Injective tokenizes $1.3B ETH treasury via SBET to bridge institutional finance and DeFi - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Five tokens below $5 outperforming ETH SOL with 88x returns from presale and adoption - AInvest - July 24th, 2025 [July 24th, 2025]
- Arthur Hayes Reveals Year-End Price Targets for Bitcoin and Ethereum, Predicts Massive Unexpected ETH Bull Run - The Daily Hodl - July 24th, 2025 [July 24th, 2025]
- Ethereum, XRP slide amid broader market correction without clear catalyst, analysts say - The Block - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Bitmine Immersion Expands ATM Offering to $4.5 Billion to Finance 5% Ethereum Supply Acquisition - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum and XRP Drop 4 and 12.7 as Crypto Market Slumps on Profit-Taking, Liquidations - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Injective Completes $1.3 Billion ETH Treasury Tokenization via SBET Protocol Launching First On-Chain DAT - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: BlackRocks ETHA Reaches $10B in 251 Days, Fastest Ethereum ETF Growth Driven by Technical Upgrades - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: RSI correction triggers crypto market cooling phase - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: US Spot Ether ETFs Mark 1st Anniversary with $8.69B Inflows, 8% Price Gain on Altcoin Rally - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ozak AI Altcoin Surpasses Ethereum Solana in 2025 Growth Projections with 100x Return Potential - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: BlackRock's ETHA Hits $10B in 251 Days, Third-Fastest as Spot Crypto ETFs Dominate Growth - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: BlackRock's ETHA hits $10B AUM in 251 days, third fastest ETF driven by crypto inflows - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum Dips 3.96% as Bearish Indicators Signal 12.83% Drop to $3,186.61 - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: MoonBull ($MOBU) Emerges as Top Meme Coin Amid Solanas $200 Surge and Ethereum-Driven Momentum - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum Staking Surpasses $23.8 Billion as $11.4 Billion Awaits Activation, Rising Staking Pool Pressures Future Yields -... - July 24th, 2025 [July 24th, 2025]
- This Ethereum Descending Broadening Wedge Pattern Looks Similar To 2019-2020, Heres What Happened Last Time - TradingView - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Arthur Hayes Predicts Bitcoin $250K 111% Gain Ethereum $10K 179% Surge by 2025 on U.S. Policy Shifts - AInvest - July 24th, 2025 [July 24th, 2025]
- Ethereum News Today: Ethereum Surges to $3,600 as Bitcoin Bull Run, ETF Inflows, and Whale Accumulation Fuel $10,000 Hopes - AInvest - July 24th, 2025 [July 24th, 2025]
- Bitmine Plans To Invest Over $2 Billion In Ethereum with Stock Sale - BeInCrypto - July 24th, 2025 [July 24th, 2025]
- Early Pepe Coin (PEPE) buyers made 100x here's the next Ethereum-based meme coin to explode - Latest news from Azerbaijan - July 24th, 2025 [July 24th, 2025]
- Ethereum Just Approached $3,500. 3 Reasons This Leading Cryptocurrency Is Still a Buy - Yahoo Finance - July 24th, 2025 [July 24th, 2025]
- Crypto presales that could outperform Ethereum in 2025 - The Economic Times - July 24th, 2025 [July 24th, 2025]
- Bitmine's Tom Lee Predicts Ether Hitting $15K, With Ethereum Emerging as Wall Street's Favored Blockchain - CoinDesk - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: Ethereum Whale Secures $9.87M Profit as ETH Dips 3% After 38% Gains on $26.11M Investment - AInvest - July 22nd, 2025 [July 22nd, 2025]
- Ethereum ETFs on Fire While Bitcoin Sees First Outflow in Two Weeks - Crypto Economy - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: Uniswap, Polygon, Shiba Inu Shift From Speculative Trading to Utility-Driven Blockchain Ecosystems - AInvest - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: Ethereum ETFs Surge 100% to $3.1 Billion Led by BlackRock - AInvest - July 22nd, 2025 [July 22nd, 2025]
- Top Altcoins to Explode: BlockDAG, Ethereum, Solana, And Cardano Could Be 2025s Biggest Winners - CoinCentral - July 22nd, 2025 [July 22nd, 2025]
- Ethereum May Crash Again, But That Dip Could Be the One You Regret Missing - TipRanks - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: Ethereum surges 50% to $3,900 as bullish momentum builds - AInvest - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: ARK Invest Acquires $182M Stake in BitMine to Boost Sustainable Ethereum Mining via Immersion Cooling Tech - AInvest - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: The Ether Machine Debuts on Nasdaq with 400,000 ETH, $1.6 Billion in Proceeds - AInvest - July 22nd, 2025 [July 22nd, 2025]
- Ethereum (ETH) Price: Why Wall Street Is Betting Big on ETHs Next Move - CoinCentral - July 22nd, 2025 [July 22nd, 2025]
- Ethereum Fueling The Fire? Crypto Inflows Hit Over $4 Billion In A Week - TradingView - July 22nd, 2025 [July 22nd, 2025]
- GENIUS ban on stablecoin yield will drive demand for Ethereum DeFi Analysts - Cointelegraph - July 22nd, 2025 [July 22nd, 2025]
- Ethereum (ETH) Futures Surge $10B in a Week: Altcoin Season Incoming? - Crypto Economy - July 22nd, 2025 [July 22nd, 2025]
- JPMorgan plans to lend against Bitcoin and Ethereum - Cryptopolitan - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News: Joseph Lubin on ETH Rivalry With Tom Lee We Will Both Compete, Hard - CoinDesk - July 22nd, 2025 [July 22nd, 2025]
- Ethereum Soars to New Highs as ETFs Explode and Giants Pile In - Cointribune - July 22nd, 2025 [July 22nd, 2025]
- Ethereum staking ETF tension rises as BlackRocks late filing renews calls for SEC to reject bulk approval - dlnews.com - July 22nd, 2025 [July 22nd, 2025]
- Ethereum Fueling The Fire? Crypto Inflows Hit Over $4 Billion In A Week - CryptoRank - July 22nd, 2025 [July 22nd, 2025]
- Ethereum Price Nears $4,000 Psychological Level Whats Next? - BeInCrypto - July 22nd, 2025 [July 22nd, 2025]
- Ethereum News Today: Ethereum Boosts L1 Gas Limit by 25% to 45 Million - AInvest - July 22nd, 2025 [July 22nd, 2025]
- We Asked ChatGPT What The Price Of Ethereum, Solana and Remittix Would Be At The End Of August 2025 - Cryptopolitan - July 22nd, 2025 [July 22nd, 2025]
- Ethereum (ETH) Slips as Whales Hunt Overleveraged Longs Below $3.7K - CryptoRank - July 22nd, 2025 [July 22nd, 2025]
- BitMine Immersion Now Holds Approximately $1 Billion of Ethereum(1) to Advance its Ethereum Treasury Strategy - PR Newswire - July 22nd, 2025 [July 22nd, 2025]
- Ethereum's ETH Breaks $3,800 Amid Massive Whale Buy, Large Capital Inflow - Yahoo Finance - July 22nd, 2025 [July 22nd, 2025]
- 'Ethereum Stole the Show' as ETH ETF Flows Hit Record High: CoinShares - Decrypt - July 22nd, 2025 [July 22nd, 2025]
- Rise of Ethereum L2 Solutions and XRP Ledger Integration on Dune Examined in Blockchain Ecosystem Report - Crowdfund Insider - July 22nd, 2025 [July 22nd, 2025]
- Top 3 Altcoins to Watch as Ethereum Breakout Triggers Altseason Calls - FXEmpire - July 22nd, 2025 [July 22nd, 2025]
- Bitmine's Tom Lee Predicts Ether Hitting $15K, With Ethereum Emerging as Wall Street's Favored Blockchain - Yahoo Finance - July 22nd, 2025 [July 22nd, 2025]
- Analyst Benjamin Cowen Issues Altcoin Warning, Predicts Alts Will Now Bleed Against Ethereum - The Daily Hodl - July 22nd, 2025 [July 22nd, 2025]
- Ethereum looks to break $3,500 as RSI 'buy signal' targets $10K ETH price - Cointelegraph - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: CoinDCX Resumes Operations After $44 Million Hack - AInvest - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Ethereum Surges 21% as Bitcoin Dominance Drops to 61% - AInvest - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Ethereum Surges 21% Outpacing Bitcoin's 0.6% Gain - AInvest - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Crypto Trader James Wynn Bets Big on ETH and PEPE with 25x and 10x Leverage - AInvest - July 20th, 2025 [July 20th, 2025]
- Peter Thiel-backed entities acquire 9.1% stake in Ethereum treasury firm BitMine Immersion - The Block - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Ethereum Surges 2.59% to $3,600 on Institutional Inflows - AInvest - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Spot Ethereum ETFs See 88% Inflow Ratio to Bitcoin ETFs - AInvest - July 20th, 2025 [July 20th, 2025]
- These 3 Ethereum Layer-2 Tokens Went From All-Time Lows to Nearly 100% Gains - CCN.com - July 20th, 2025 [July 20th, 2025]
- SharpLink Gaming Targets 1% of Ethereum Supply with Expanded $6B Share Sale - Cointribune - July 20th, 2025 [July 20th, 2025]
- Ethereum (ETH) Crosses $3,100, Will This $0.03 Token Be the Next ETH Killer? - MSN - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Ethereum Surges 50% in Two Months as Bitcoin Dominance Drops to 61.6% - AInvest - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Ethereum Whales Shift Focus to AAVE Amid Bullish Momentum - AInvest - July 20th, 2025 [July 20th, 2025]
- Prediction: SharpLink's Ethereum Move Is Just the Beginning - MSN - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: Ethereum ETFs See $2.182 Billion Inflow This Week - AInvest - July 20th, 2025 [July 20th, 2025]
- Why This Little-Known Altcoin Is Quietly Outperforming Ethereum, Solana and XRP in 2025 - Live Bitcoin News - July 20th, 2025 [July 20th, 2025]
- From Bitcoin To Ethereum: The Rise Of Crypto Treasury Strategies - Forbes - July 20th, 2025 [July 20th, 2025]
- As Ethereum Price Explodes Towards $4k, Experts Analyze The Best ETH Ecosystem Plays For Life Changing Gains - MSN - July 20th, 2025 [July 20th, 2025]
- Ethereum News Today: ETHRANSACTION Launches 2025 Optimized Platform for Mobile Bitcoin Ethereum Mining - AInvest - July 20th, 2025 [July 20th, 2025]
- SEC Delays BlackRock Ethereum ETF In-Kind Decision - Yahoo Finance - July 20th, 2025 [July 20th, 2025]