Halborn: CVE Program partner

CVEs, 365 days03 all time, 0 rejected

Quality-median 99%

CVSS by the CNA-share of records

CWE-share of records

Affected versions-not n/a or unspecified

CVSS added by CISA-lower is better

Organisation	Halborn
Role	CNA
Type	Researcher
Reports to	mitre
Scope	All blockchain and Web3 products that rely on smart contracts written in Rust, Go, and Solidity, as well as blockchain associated Web2 and Web3 infrastructure not covered by another CNA.
Advisories	https://halborn.com/disclosures/

CVE-2023-33242 2023-08-09 · CVSS 9.6
Crypto wallets implementing the Lindell17 TSS protocol might allow an attacker to extract the full ECDSA private key by exfiltrating a single bit in every signa
CVE-2023-33241 2023-08-09 · CVSS 9.6
Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and c
CVE-2023-30769 2023-04-17 · CVSS 9.1
Vulnerability discovered is related to the peer-to-peer (p2p) communications, attackers can craft consensus messages, send it to individual nodes and take them

Halborn