ssvlabs / ssv-dkg

GNU General Public License v3.0
13 stars 11 forks source link

Fix for audit issue - 5.2 missing signature check #149

Closed pavelkrolevets closed 5 days ago

pavelkrolevets commented 1 week ago

Description: CS-SSVDKG-002 At line 282 of pkgs/initiator/initiator.go, verifyMessageSignatures() is called on the kyberMsgs variable. However, those messages have already been verified at line 264. The context suggests that the intent was to check the signatures on dkgResult, which are currently never verified.

Solution: