Search results

No proof of knowledge of kex_private_key allows attacker to impersonate another signer

Status: Open.

#219 In xoloki/wsts;

· xoloki-stacks opened on Feb 25, 2026

TupleProof does not include rB in the challenge hash

Status: Open.

#216 In xoloki/wsts;

· xoloki-stacks opened on Feb 24, 2026

Signer state machine does not validate dkg_id

Status: Open.

#215 In xoloki/wsts;

· xoloki-stacks opened on Feb 24, 2026

check_public_shares doesn't validate internal signer/party ID inside schnorr::ID

Status: Open.

#214 In xoloki/wsts;

· xoloki-stacks opened on Feb 22, 2026

Coordinator panics when a signer is removed from the wait list before validation

Status: Open.

#213 In xoloki/wsts;

· xoloki-stacks opened on Feb 10, 2026

Empty polynomial commitment panics during DKG validation

Status: Open.

#212 In xoloki/wsts;

· xoloki-stacks opened on Feb 10, 2026

Uncommitted private shares are still summed into the DKG secret, producing an invalid group key

Status: Open.

#211 In xoloki/wsts;

· xoloki-stacks opened on Feb 10, 2026

Hash the kex_public_key in DkgPublicShares to prevent man in the middle attacks

Status: Open.

#209 In xoloki/wsts;

· xoloki-stacks opened on Feb 3, 2026

Signers should initialize nonces to something random not zero

Status: Open.

#207 In xoloki/wsts;

· xoloki-stacks opened on Feb 3, 2026

FIRE coordinator does not verify that all DKG packets received are being waited on

Status: Open.

#206 In xoloki/wsts;

· xoloki-stacks opened on Jan 23, 2026

Add test vectors from RFCs

good first issueGood for newcomersGood for newcomers

Status: Open.

#202 In xoloki/wsts;

· xoloki opened on Aug 28, 2025

Enforce a consistent view of commitments during DKG

Status: Open.

#190 In xoloki/wsts;

· xoloki opened on Jul 11, 2025

·  

Audit and Hardening