VU#701544: mpc-lib Hardened Derivation Fails to Protect Ancestor Isolation
// AI summary
Fireblocks' mpc-lib library has a cryptographic fail-open vulnerability in BIP32 hardened derivation, allowing an attacker with a compromised lower-level signer share to recover the higher-level share.
// from the source
Overview Fireblocks' mpc-lib library contains a cryptographic fail-open vulnerability in its BIP32 hardened derivation implementation in the case of a missing private parent key. This breaks the ancestor isolation property of hardened derivation, allowing an attacker with a compromised lower-level signer share to recover the higher-level share it was derived from. Description Fireblocks is a digital-asset custody and wallet platform that secures the private keys behind cryptocurrency wallets for