Mark Karpelès(@MagicalTux):SecondFi security issue wasn't a nonce reuse, or a weak key, but a public nonce used to sign keys. The Ed25519 standard defines how you are supposed to generate nonces, using a secret prefix. SecondFi didn't have a secret prefix at all, meaning anyone could derive the nonce by just seeing a signed transaction. Rolling your own crypto code is dangerous, I'm guessing the wallet wasn't audited, resulting in this problem going undetected. Read more at Tibane:

Mark Karpelès

@MagicalTux

Tech first / / / Press inquiries: contact@magicaltux.net / Opinions are my own

参加 February 2009

158 フォロー中 41.4K ファン

Mark Karpelès@MagicalTux

2026.06.25 16:18

SecondFi security issue wasn't a nonce reuse, or a weak key, but a public nonce used to sign keys. The Ed25519 standard defines how you are supposed to generate nonces, using a secret prefix. SecondFi didn't have a secret prefix at all, meaning anyone could derive the nonce by just seeing a signed transaction. Rolling your own crypto code is dangerous, I'm guessing the wallet wasn't audited, resulting in this problem going undetected. Read more at Tibane: