FF News Logo
Monday, April 20, 2026
FinovateSpring | FFNews

Breaking News

Smartstream: The Evolutionary Leap from Process Automation to Full Autonomy How NOTO and Opus Advisory Group Are Unifying Fraud Prevention | NOTO, Opus Advisory Group | The Fintech Show #163 AQMetrics’ Strategy for Unifying Data, Scaling for AI, and Building Trust MPE 2026: G+D Netcetera on the Payment Security Stack Driving Higher Conversion and Lowering Fraud InsurTech NY: Camunda on Smarter Workflows Finastra: What Banks Must Do for 2026 InsurTech NY: Fair on Closing Coverage Gaps InsurTech NY: Teqfocus on Practical AI Moonfare Launches New AI-Focused Technology Strategy Innovating Finance Together Summit Highlights the Power of Collaboration in a Fast-Changing Financial Landscape Lydian Launches Co-Branded Visa Platinum Card, Turning Digital Assets Into Everyday Payments MENA Fintech Association Welcomes Facephi as a Member to Support Digital Identity and Secure Financial Onboarding Across the Region The Family Office Launches Wealth Mermaid, a Pioneering AI Wealth Assistant PayDo Launches New Crypto-to-Fiat Payment Capabilities MoneyHash and Visa Expand Partnership with Multi-Year Partnership to Expand Cybersource Enablement Across Emerging Markets
Over $70 Billion Assets Saved From Attack Through Discovery of Security Flaws by io.finnet and Kudelski Security

April 19 2023

Over $70 Billion Assets Saved From Attack Through Discovery of Security Flaws by io.finnet and Kudelski Security

Share this post:

Share on LinkedIn Share on WhatsApp

io.finnet and Kudelski Security discovered four flaws in the implementation of a popular Threshold Signature Scheme (TSS), a Multi-Party Computing (MPC) protocol commonly used by digital asset custody solutions and multiparty wallets to produce digital signatures that protects assets worth more than $70 Billion.

A Threshold Signature Scheme (TSS) allows a group of individuals to sign a message collectively, as long as a predetermined threshold of those individuals agree to do so. As a result, it is safer and simpler to use in applications involving digital assets. However, sometimes there are issues with the way it’s set up that could give external parties access to restricted data. To fix these problems, software managers need to use updated versions that fix the issues.

“Technology is constantly evolving, and with it come new challenges and risks. However, with the right mindset and tools, we can overcome these challenges and make the digital space a safer place for everyone. We are committed to advancing security and privacy, and are always looking for partnerships with individuals that share the same values.” said Luke Plaster, Chief Crypto Officer at io.finnet, who leads digital assets initiatives.Kudelski Security and io.finnet discovered vulnerabilities in the protocols, related to the TSS techniques, that could have been exploited by malicious parties to cause a security breach. TSS techniques are primarily used in programming languages such as Go and Rust, to execute functions quickly and securely.

“TSS-Lib,” an MIT-licensed Go programming language implementation of the protocols, is one of the better known libraries that was affected. In collaboration with MPC Alliance, io.finnet decided to inform the involved parties about the issues and provided solutions to fixing them. The team chose to keep the affected parties private but provided the causes, impact and solution to prevent similar issues in the future.

The full details have been made public through Mitre’s CVE database. The issues have been given special numbers to allow individuals to identify them. These issues have been assigned the following CVE numbers: [CVE-2022-47930], [CVE-2022-47931], [CVE-2023-26556] and [CVE-2023-26557]. You can learn more on io.finnet blog and Kudelski’s here.

Affected parties are encouraged to get in touch with io.finnet, Kudelski Security, or the MPC Alliance for advice if they need further assistance.

 

People In This Post

Luke Plaster

Luke Plaster

io.finnet

Companies In This Post

io.finnet

io.finnet
Kudelski Security

Kudelski Security
  1. Smartstream: The Evolutionary Leap from Process Automation to Full Autonomy

    Fintech TV

     Read more
  2. How NOTO and Opus Advisory Group Are Unifying Fraud Prevention | NOTO, Opus Advisory Group | The Fintech Show #163

    Episodes

     Read more
  3. AQMetrics’ Strategy for Unifying Data, Scaling for AI, and Building Trust

    Enterprise Ireland

     Read more
  4. MPE 2026: G+D Netcetera on the Payment Security Stack Driving Higher Conversion and Lowering Fraud

    Event Videos 2026

     Read more
  5. InsurTech NY: Camunda on Smarter Workflows

    Insurtech

     Read more
FinovateSpring | FFNews
More On