Max @ Safeheron

[Max @ Safeheron @Max17787305]

@VitalikButerin 13/ In conclusion, current blockchain development is far from mature. In terms of multi-party management for #cryptocurrency, there will be a long-term coexistence, competition, and development of multiple solutions. We will explore and provide the best solutions for users.

[Max @ Safeheron @Max17787305]

1/ With the increasing recognition of crypto assets, the demand for multi-party management is also growing. Traditional on-chain multisig (eg. Bitcoin), smart contract multisig (eg. Ethereum), and MPC multisig (supporting all chains) have become mainstream technologies.

[Max @ Safeheron @Max17787305]

@VitalikButerin 12/ From the perspective of blockchain development, MPC provides sharding in private key generation and lifecycle management, while smart contract wallets offer more expansion possibilities for blockchain functionality and ecosystem construction.

[Max @ Safeheron @Max17787305]

Incomplete MPC schemes can lead to risks, such as providing windows for attacks like cache-based attacks.

To mitigate these risks, we strongly recommend the use of a fully MPC-based multi-party management scheme in the MPC management process.

[Max @ Safeheron @Max17787305]

The core reason for the potential risk is the lack of a fully MPC-based multi-party management scheme.

[Safeheron @Safeheron]

🔒Enhancing Security on MPC Wallet-dYdX Connections🔒

We identified potential signature-derived key risk in connecting specific dApps with MPC wallets and promptly collaborated with @SlowMist_Team and @sharkteamorg to verify and develop solutions.

👉https://t.co/rioF6VFj5U

[Max @ Safeheron @Max17787305]

This creates a "weakest link" effect, where the centralized aspect weakens the overall security level of the entire scheme, providing a window for attacks such as cache-based attacks.

[Max @ Safeheron @Max17787305]

During the initial stage of the DYDX signature, MPC was utilized to protect the intermediate signature, but a centralized signature scheme was later used.

[Max @ Safeheron @Max17787305]

基于Merkle Tree，中心化平台如何实现有效可信的100%准备金证明？分享一下个人的看法：

[Max @ Safeheron @Max17787305]

A thorough ANALYSIS On Ed25519 use risks.
See the real cause behind it & what we can do to not fall victims
@kostascrypto @EvanWeb3 @Mysten_Labs @evilcos @BenWAGMI @coinspect @NCCGroupInfosec @0xkaneGM Check it Out👉 https://t.co/KcWiYrnpfz