Ledger Bitcoin App's Implementation of Miniscript Had A Theft Enabling Bug

"Liana was probably the only wallet to provide a full integration of Ledger’s Miniscript capabilities, and no release of Liana allowed a user to create a Miniscript descriptor that was affected by this bug. So if anybody was affected by this vulnerability, they must have been using advanced hand-rolled tooling."

https://www.nobsbitcoin.com/ledger-bitcoin-app-implementation-of-miniscript-had-a-vulnerability/

Reply to this note

Please Login to reply.

Discussion

Be careful out there.