❌

Normal view

There are new articles available, click to refresh the page.
Yesterday — 28 October 2026Cryptonews

Google MPC Could Reshape Crypto Custody: Fireblocks Security Flaw Draws Attention

28 October 2026 at 07:57

Google is preparing to expand its crypto security operations with a new Multi-Party Computation (MPC) service targeting institutional digital asset custody. The move comes as a fresh vulnerability in Fireblocks’ MPC library highlights the risks buried inside crypto key-management systems.

Google MPC is reportedly in private preview, with major financial institutions testing the service. The technology is also being used to secure digital assets on Ethereum and Solana, with commercial availability expected in early 2027.

The timing puts institutional crypto security under renewed scrutiny. On October 26, CERT/CC disclosed a vulnerability in Fireblocks’ MPC library that could weaken protections separating cryptographic key shares.

CERT/CC’s Oct 26 advisory describes a hardened-derivation flaw in Fireblocks’ mpc-lib, CVE-2026-90975. A compromised descendant signer share plus its chain code can expose that party’s ancestor shares. This does not independently recover a full spendable key; MPC threshold…

— Venkata Satish Guttula 🛰 (@snakeyesV1) October 27, 2026

Discover: The Crypto Presales This Q4 2026

How Google MPC Could Change Crypto Custody

MPC allows multiple parties to participate in transaction signing without assembling a complete private key in one place. Instead, each participant holds a separate key share, and the parties collaborate to authorize transactions.

This design reduces the risk associated with a single compromised device or insider. However, MPC does not eliminate vulnerabilities in the software handling those shares.

Google MPC targets institutional crypto custody as a Fireblocks MPC vulnerability highlights the risks facing digital asset security systems.

Google Cloud has previously supported institutional MPC deployments through Confidential Space, which uses confidential computing and hardware-backed attestation. These safeguards help verify sensitive workloads and restrict access to protected data, including during blockchain transaction signing.

The reported Google MPC service would take the company further into dedicated institutional crypto security. Its appeal could lie in combining cloud infrastructure with cryptographic controls designed for organizations managing substantial digital asset holdings.

Now, institutions will still need to assess implementation details, transaction approval policies, and recovery procedures. MPC itself is a cryptographic technique, not a guarantee that every component of a custody system is secure.

Fireblocks MPC Vulnerability and Key Security Risks

CERT/CC published vulnerability VU#701544 on October 26, identifying a flaw in Fireblocks’ mpc-lib library. The issue affects its implementation of BIP32 hardened key derivation when a required private parent key is missing.

According to the advisory, the library can substitute a zero-filled buffer instead of rejecting the operation. If an attacker also obtains a compromised descendant signer share and its associated chain code, the attacker may recover ancestor shares within that party’s key hierarchy.

The flaw does not expose a complete, spendable private key. Instead, it weakens an additional protection designed to limit how far a compromised share can expose related key material.

CERT/CC said no vendor fix was available when its advisory was published. It recommended keeping chain codes confidential and avoiding reliance on hardened derivation to isolate signer shares until the implementation is corrected.

The incident illustrates why Google MPC security will need to be evaluated at the implementation level. Distributing private keys is one layer of protection, but derivation logic, access controls, and transaction approval mechanisms also matter.

Discover: The Best Token Presales

The post Google MPC Could Reshape Crypto Custody: Fireblocks Security Flaw Draws Attention appeared first on Cryptonews.

Before yesterdayCryptonews

What is Crypto Bunker Mode? Ethereum’s Justin Drake Warns of a Possible AI Break

8 October 2026 at 03:26

What is Crypto bunker mode? Ethereum Foundation researcher Justin Drake urged the crypto industry on October 7, 2026, to plan a controlled migration of funds to fresh addresses with unexposed public keys.

His “bunker mode” proposal addresses a hypothetical AI-assisted break of ECDSA before quantum computing reaches “Q-Day”; it is not evidence that AI has broken Bitcoin or Ethereum cryptography.

Drake’s post on X called for calm preparation: moving assets over time to addresses that have never signed a transaction. According to Drake, ECDSA, the signature scheme used by Bitcoin and Ethereum, verifies that a transaction was authorized by the holder of the relevant private key.

So, when an address signs a transaction, its public key becomes visible on-chain. A fresh address that has only received funds reveals an address hash instead, leaving the public key unexposed.

Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash.

Holders, starting with large…

— Justin Drake (@drakefjustin) October 7, 2026

If ECDSA were broken, an attacker could theoretically use an exposed public key to recover the private key and drain the wallet. Drake defined a break as recovering a private key in about a week with available hardware, such as a large GPU cluster. That is the scenario he wants the industry to consider, not a capability that has been shown to exist.

Drake cited 722 mathematical results published by OpenAI as evidence of rapid AI-driven progress. Drake said holders should not panic or rush, and that moving funds does not require new cryptography or wallets.

He also urged Binance, Bitbank, Robinhood, Bitfinex, and Tether to strengthen cold storage. Those recommendations put key management and controlled address migration at the center of the near-term response, rather than suggesting that users abandon existing networks.

Earn $50 and Enter $300K Prize Draw on EdgeX

What Is AI Cryptography, “Crypto Q-Day,” and Why Is Bunker Mode Needed

Q-Day describes the point when quantum computers become powerful enough to break cryptographic systems used today. Drake has warned for years about that longer-term threat. His latest concern is different: an AI-assisted mathematical attack using conventional computing hardware could, in the worst case, undermine ECDSA before quantum computers are ready.

Ethereum’s account-security exposure is specifically tied to ECDSA and public keys revealed by signed transactions; it does not mean that all Ethereum cryptography has failed.

What is crypto bunker mode? Justin Drake’s plan for gradual fund migration, and the new crypto defense against a hypothetical AI breakthrough
Trade Crypto Safely on Bybit and Get a Chance to Win Our $1,000 USDT Airdrop

The Ethereum Foundation formed a dedicated post-quantum team earlier in 2026, while Vitalik Buterin has outlined plans for quantum-resistant cryptography. Drake said he would push to accelerate the network’s move toward hash-based cryptography, a central part of Ethereum’s post-quantum security.

The distinction between cryptographic risk and other wallet vulnerabilities remains important. An exploit involving an Ethereum wallet component, such as the Safe Wallet exploit tied to Aave’s FlashloanAdapter, is not evidence that ECDSA itself has been broken.

Drake said he would push for “maximum defensive acceleration” of Ethereum’s roadmap toward hash-based cryptography and called on major custodians to harden cold storage. ETH is to plan the technical transition and strengthen custody practices without treating a hypothetical attack as a present fact.

For now, it is not about what “bunker mode” is; a preparedness proposal built around crypto public-key exposure and gradual migration is needed.

Discover: The Best Token Presales

The post What is Crypto Bunker Mode? Ethereum’s Justin Drake Warns of a Possible AI Break appeared first on Cryptonews.

What is Crypto Bunker Mode? Ethereum’s Justin Drake Warns of a Possible AI Break

8 October 2026 at 03:26

What is Crypto bunker mode? Ethereum Foundation researcher Justin Drake urged the crypto industry on October 7, 2026, to plan a controlled migration of funds to fresh addresses with unexposed public keys.

His “bunker mode” proposal addresses a hypothetical AI-assisted break of ECDSA before quantum computing reaches “Q-Day”; it is not evidence that AI has broken Bitcoin or Ethereum cryptography.

Drake’s post on X called for calm preparation: moving assets over time to addresses that have never signed a transaction. According to Drake, ECDSA, the signature scheme used by Bitcoin and Ethereum, verifies that a transaction was authorized by the holder of the relevant private key.

So, when an address signs a transaction, its public key becomes visible on-chain. A fresh address that has only received funds reveals an address hash instead, leaving the public key unexposed.

Today I call upon the blockchain industry to calmly begin planning for "bunker mode". My personal recommendation is to set in motion a controlled mass migration of assets to fresh addresses, i.e. addresses whose pubkeys remain hidden behind a hash.

Holders, starting with large…

— Justin Drake (@drakefjustin) October 7, 2026

If ECDSA were broken, an attacker could theoretically use an exposed public key to recover the private key and drain the wallet. Drake defined a break as recovering a private key in about a week with available hardware, such as a large GPU cluster. That is the scenario he wants the industry to consider, not a capability that has been shown to exist.

Drake cited 722 mathematical results published by OpenAI as evidence of rapid AI-driven progress. Drake said holders should not panic or rush, and that moving funds does not require new cryptography or wallets.

He also urged Binance, Bitbank, Robinhood, Bitfinex, and Tether to strengthen cold storage. Those recommendations put key management and controlled address migration at the center of the near-term response, rather than suggesting that users abandon existing networks.

Earn $50 and Enter $300K Prize Draw on EdgeX

What Is AI Cryptography, “Crypto Q-Day,” and Why Is Bunker Mode Needed

Q-Day describes the point when quantum computers become powerful enough to break cryptographic systems used today. Drake has warned for years about that longer-term threat. His latest concern is different: an AI-assisted mathematical attack using conventional computing hardware could, in the worst case, undermine ECDSA before quantum computers are ready.

Ethereum’s account-security exposure is specifically tied to ECDSA and public keys revealed by signed transactions; it does not mean that all Ethereum cryptography has failed.

What is crypto bunker mode? Justin Drake’s plan for gradual fund migration, and the new crypto defense against a hypothetical AI breakthrough
Trade Crypto Safely on Bybit and Get a Chance to Win Our $1,000 USDT Airdrop

The Ethereum Foundation formed a dedicated post-quantum team earlier in 2026, while Vitalik Buterin has outlined plans for quantum-resistant cryptography. Drake said he would push to accelerate the network’s move toward hash-based cryptography, a central part of Ethereum’s post-quantum security.

The distinction between cryptographic risk and other wallet vulnerabilities remains important. An exploit involving an Ethereum wallet component, such as the Safe Wallet exploit tied to Aave’s FlashloanAdapter, is not evidence that ECDSA itself has been broken.

Drake said he would push for “maximum defensive acceleration” of Ethereum’s roadmap toward hash-based cryptography and called on major custodians to harden cold storage. ETH is to plan the technical transition and strengthen custody practices without treating a hypothetical attack as a present fact.

For now, it is not about what “bunker mode” is; a preparedness proposal built around crypto public-key exposure and gradual migration is needed.

Discover: The Best Token Presales

The post What is Crypto Bunker Mode? Ethereum’s Justin Drake Warns of a Possible AI Break appeared first on Cryptonews.

❌
❌