Just finished my new article, describing how Wagner's Attack was used to break the first draft of MuSig in 2018.

https://conduition.io/cryptography/wagner/