« Back to list

CVE-2023-33241

Status: ModifiedCritical (9.1)—

Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (2)

Gg18 Project — Gg18Gg20 Project — Gg20

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2023-33241",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-33241",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-10T14:37:38.704288Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "disclosures@halborn.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.6,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.8,
        "exploitabilityScore": 3.1
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "disclosures@halborn.com",
      "affectedData": [
        {
          "vendor": "GG TSS Implementations",
          "product": "Wallet",
          "versions": [
            {
              "status": "affected",
              "version": "18"
            },
            {
              "status": "affected",
              "version": "20"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-08-09T22:15:10.323",
  "references": [
    {
      "url": "https://eprint.iacr.org/2019/114.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://eprint.iacr.org/2020/540.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://github.com/fireblocks-labs/mpc-ecdsa-attacks-23",
      "tags": [
        "Exploit"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://github.com/fireblocks-labs/safeheron-gg20-exploit-poc",
      "tags": [
        "Exploit"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://www.fireblocks.com/blog/gg18-and-gg20-paillier-key-vulnerability-technical-report/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "disclosures@halborn.com"
    },
    {
      "url": "https://eprint.iacr.org/2019/114.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://eprint.iacr.org/2020/540.pdf",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/fireblocks-labs/mpc-ecdsa-attacks-23",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/fireblocks-labs/safeheron-gg20-exploit-poc",
      "tags": [
        "Exploit"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.fireblocks.com/blog/gg18-and-gg20-paillier-key-vulnerability-technical-report/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-74"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Crypto wallets implementing the GG18 or GG20 TSS protocol might allow an attacker to extract a full ECDSA private key by injecting a malicious pallier key and cheating in the range proof. Depending on the Beta parameters chosen in the protocol implementation, the attack might require 16 signatures or more fully exfiltrate the other parties' private key shares."
    }
  ],
  "lastModified": "2026-06-17T06:01:23.300",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gg18_project:gg18:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB48800C-F964-43D1-B0A5-0A9E4FF0983D"
            },
            {
              "criteria": "cpe:2.3:a:gg20_project:gg20:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3EB9A9BD-F519-4A6B-A525-6252DD8407FE"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "disclosures@halborn.com"
}