Odaily Planet Daily News CZ tweeted that Fireblocks discovered a series of new vulnerabilities affecting MPC wallets that existed in Binance's open source TSS library, but have been fixed. Binance user funds were not affected.
According to previous reports, Fireblocks disclosed the MPC wallet vulnerability BitForge. MPC wallet providers such as Coinbase, Binance, and ZenGo have cooperated with Fireblocks to fix this vulnerability. Fireblocks said it was identifying other potentially affected groups and contacting them under the industry-standard 90-day responsible disclosure process.
If left unaddressed, the flaws would have allowed attackers and malicious insiders to withdraw funds from the wallets of millions of retail and institutional customers in seconds, Fireblocks said.