Bitcoin

Dark

when

Security

Robin

Security researchers have discovered a troubling new method that hackers can use to extract private keys from a Bitcoin hardware wallet even with only signed two transactions, which they’ve named “Dark Skippy.” 
The vulnerability potentially affects all hardware wallet models — though it can only work if the attacker tricks the victim into downloading malicious firmware.
A previous version of the method required the victim to post “dozens” of transactions to the blockchain. But the new “Dark Skippy” version can be <a href="https://darkskippy.com/" target="_blank" rel="noopener nofollow">performed</a> even if the victim only posts a couple of transactions to the blockchain. In addition, the attack can be executed even if the user relies on a separate device to generate seed words.
The disclosure report was published by Lloyd Fournier, Nick Farrow, and Robin Linus on Aug. 5. Fournier and Farrow are co-founders of hardware wallet manufacturer Frostsnap, while Linus is a co-developer of Bitcoin protocols ZeroSync and BitVM.
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-08/e78a7559-d4ec-460e-bfd9-e8a30bac0cdf.png" alt="‘Dark Skippy’ method can steal Bitcoin hardware wallet keys" title="">
 <figcaption style="text-align: center;">
 Source: <a href="https://x.com/utxoclub/status/1820520963454480517" target="_blank" rel="noopener nofollow">Nick Farrow</a>
 </figcaption>
</figure>
According to the report, a hardware wallet’s firmware can be programmed to embed portions of the user’s seed words into “low entropy secret nonces” which are then used to sign transactions. The resulting signatures get posted to the blockchain when transactions are confirmed. The attacker can then scan the blockchain to find and record these signatures.
The resulting signatures contain only “public nonces,” not the portions of seed words themselves. However, the attacker can enter these public nonces into Pollard’s Kangaroo Algorithm to successfully compute the secret nonces from their public versions. 
Pollard’s Kangaroo Algorithm, discovered by mathematician John M. Pollard, is an algorithm in computational algebra that can be used to solve the discrete logarithm problem.
According to the researchers, a user’s full set of seed words can be derived using this method, even if the user only produces two signatures from their compromised device and even if the seed words were produced on a separate device.
Related: <a href="https://cointelegraph.com/news/major-wallet-vulnerability-revealed-as-user-barely-reclaims-9-btc">Major Wallet Vulnerability Revealed As User Barely Reclaims 9 BTC</a>
Previous versions of the vulnerability have been documented in the past, the researchers stated. However, these older versions relied upon “nonce grinding,” a much slower process that required many more transactions to be posted to the blockchain. Even so, the researchers stopped short of calling Dark Skippy a new vulnerability, claiming instead that it is “a new way of exploiting an existing vulnerability.”
To mitigate against the threat, the report suggests that hardware wallet manufacturers should take extra care to prevent malicious firmware from getting into users’ devices, which they can do through features like “secure boot and locked JTAG/SWD interfaces […] reproducible and vendor signed firmware builds[,...] [and] various other security features.” In addition, it suggests that wallet owners may want to employ practices to keep their devices secure, including “secret places, personal safes, or maybe even tamper-evident bags,” although the report also suggests that these practices may be “cumbersome.”
<figure>
 <img src="https://s3.cointelegraph.com/uploads/2024-08/f568883a-0288-4821-a499-8fc9d9def3e2.png" alt="‘Dark Skippy’ method can steal Bitcoin hardware wallet keys">
 <figcaption style="text-align: center;">
 Dark Skippy mitigation techniques. Source: Dark Skippy researchers.
 </figcaption>
</figure>
Another suggestion it provides is for wallet software to use “anti-exfiltration” signing protocols, which prevent the hardware wallet from producing nonces on its own.
Bitcoin wallet vulnerabilities have caused significant losses to users in the past. In August, 2023, cybersecurity firm Slowmist reported that over $900,000 worth of Bitcoin <a href="https://cointelegraph.com/news/newly-discovered-bitcoin-wallet-loophole-let-hackers-steal-funds-slow-mist">had been stolen via a flaw</a> in the Libbitcoin explorer library. In November, Unciphered reported that $2.1 billion worth of Bitcoin held in old wallets may be in danger of being <a href="https://cointelegraph.com/news/randstorm-crypto-wallet-vulnerability-bitcoin-dogecoin-litecoin-zcash">drained by attackers</a> because of a flaw in BitcoinJS wallet software.
<a href="https://cointelegraph.com/magazine/fake-bitcoin-2024-ai-stream-mog-phishing-dmm-hack-dust-exsi-ransomware/">Magazine: ‘Elon Musk at Bitcoin 2024’ scam, Lazarus Group hacks, MOG phishing: Crypto-Sec</a>

‘Dark Skippy’ method can steal Bitcoin hardware wallet keys

Cointelegraph

Other articles published on Aug 8, 2024

Nexera Burns 32.5 Million Tokens

Solana’s first gaming SVM surpasses 1M monthly active users

FCA Issues New Guidelines for Crypto Firms on Marketing Compliance

Helldivers 2 developers address backlash over fire mechanics changes

How High Can Cardano Go? Cardano (ADA) price prediction

Nasdaq and NYSE Proposes ETH ETF Options : SEC’s Green Signal is awaited

Join our free newsletter for daily crypto updates!