{"repo":"demining/Bluetooth-Attacks-CVE-2025-27840","free":true,"listed":false,"github":"https://github.com/demining/Bluetooth-Attacks-CVE-2025-27840","clone":"git clone https://github.com/demining/Bluetooth-Attacks-CVE-2025-27840.git","description":"Bitcoin Cryptanalysis: CVE-2025-27840 Vulnerability in ESP32 Microcontrollers Puts Billions of IoT Devices at Risk via Wi-Fi & Bluetooth","language":"Jupyter Notebook","stars":12,"topics":["bitcoin","bitcoin-wallet","bluetooth","btc","privatekey","vulnerability","wi-fi","cve-2025-27840"],"license":null,"category":"security-tools","readme_excerpt":"This paper discusses how an attacker can introduce a hidden list of vulnerabilities through module updates, which can lead to compromise of ESP32 devices and gaining unauthorized access to private keys, affecting billions of devices using this microcontroller. One of the key issues is the  CVE-2025-27840  vulnerability discovered in the ESP32 architecture. To ensure security for the Bitcoin network, we identified the following vulnerabilities, where the possibility of using invalid private keys due to the lack of a lower bound check in the function   has invalid privkey ; a vulnerability in the transaction signature forgery in the function   electrum sig hash  due to incompatibility with BIP-137;  a weak PRNG issue  in the key generation function   random key , making personal private keys for cryptocurrency wallets predictable; lack of verification of points on the ECC curve in the function   multiply , which can lead to invalid curve attacks; a vulnerability in the function   ecdsa raw sign  when restoring the Y-coordinate, potentially leading to a substitution of the public key; and vulnerabilities related to deprecated hashing APIs in the   bin ripemd160 . --- Tutorial: https://youtu.be/nBeZWm2z5o4 Tutorial: https://cryptodeeptech.ru/bitcoin-bluetooth-attacks Tutorial: https://dzen.ru/video/watch/6784be61b09e46422395c236 Google Colab: https://colab.research.google.com/drive/15lPDHeTo","default_branch":null,"files":null,"tree":[],"storefront":"/r/demining","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/demining/Bluetooth-Attacks-CVE-2025-27840/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}