Search results

Security Disclosure: Biased Polynomial Coefficients and Missing Share Integrity Verification in Shamir Secret Sharing

Status: Open.

#63 In bitaps-com/jsbtc;

· zinke1924 opened on Jun 17, 2026

Bug: indexBits=8 default causes silent wallet loss for 12-word mnemonics

Status: Open.

#55 In bitaps-com/jsbtc;

· mfdevolpe opened on May 11, 2026

# Shamir Mnemonic Reconstruction Accepts Invalid Share Sets → Silent Wrong Secret (Loss of Funds)

Status: Open.

#52 In bitaps-com/jsbtc;

· angus14 opened on Apr 17, 2026

Title: Invalid threshold input (“$ of X”) triggers fallback mode that duplicates entropy and leaks checksum-index hiding mechanism (significant implementation bug)

Status: Open.

#48 In bitaps-com/jsbtc;

· yatescleta-afk opened on Mar 16, 2026

Security Vulnerability: Implementation bias in __split_secret via rejection sampling (Entropy reduction)

Status: Open.

#47 In bitaps-com/jsbtc;

· Pastorjetu opened on Mar 11, 2026

Bounty Challenge - Critical SSS Implementation Vulnerability - FULL Data Leakage

Status: Open.

#46 In bitaps-com/jsbtc;

· ChrisYatesUK opened on Mar 10, 2026

[Security] Leading coefficient can be zero in shamir_secret_sharing.js (degree-drop vulnerability) (bounty program)

Status: Open.

#45 In bitaps-com/jsbtc;

· rohanstake opened on Feb 18, 2026

VULNERABILITY REPORT FOR BITAPS SHAMIR'S SECRET SHARING IMPLEMENTATION

Status: Open.

#44 In bitaps-com/jsbtc;

· fabdevil opened on Feb 1, 2026

Information Leakage via Non-Uniform Coefficient Generation

Status: Open.

#43 In bitaps-com/jsbtc;

· ThewsyRum opened on Jan 24, 2026

SHORT SECURITY AUDIT REPORT Shamir Secret Sharing Implementation Bitaps JsBTC / PyBTC A. Modulo 255 Defect (“Never 255 Bug”) Polynomial coefficients never take the value 255 (0xFF) due to generator constraints (e.g., modulo 255 arithmetic or specific GF table usage). Impact: 1. The coefficient space is reduced from 256 to 255 possible values 2. Entropy reduction is extremely small Risk Assessment: 1. Severity: Low 2. Status: Non-fatal and does not reduce the Shamir threshold B. Global Polynomial Coefficients (Static Across Bytes) The polynomial coefficients (a₁, a₂, etc.) are generated once and reused across all bytes of the mnemonic entropy, instead of being regenerated independently per byte. Impact: 1. Secret bytes become correlated 2. Polynomials are no longer independent per byte 3. Shamir Secret Sharing security is significantly degraded Status: Design-level fatal flaw My addres BTC 18FXF47XcP52vhdbjimQ3CvD93NnHTPF73 Thankyou

Status: Open.

#42 In bitaps-com/jsbtc;

· moetneos-maker opened on Jan 22, 2026

Design Flaw: Per-Byte Shamir Splitting of BIP-39 Mnemonics Causes Entropy Collapse and Non-Unique Reconstruction

Status: Open.

#41 In bitaps-com/jsbtc;

· Petah0411 opened on Dec 13, 2025

Title*: Exploring Shamir (3-of-5) with 2 Shares - ZeroNights X Bounty (PyBTC & JsBTC) - *Body*: Hi @bitaps-com team, exploring *PyBTC* and *JsBTC* for the ZeroNights X Shamir Secret Backup Scheme bounty. Given 2/3 shares: - Share 1: session cigar grape merry useful churn fatal thought very any arm unaware - Share 2: clock fresh security field caution effort gorilla speed plastic common tomato echo Tested recover_secret in both repos—fails as expected (needs 3 shares). No critical flaws yet. Suggestions: - Sanitize logs for invalid shares. - Test edge cases with manipulated inputs. - Document partial-share handling.

Status: Open.

#40 In bitaps-com/jsbtc;

· BTRMMD opened on Dec 7, 2025