How Malformed Paillier Keys Leaked THORChain’s Vault Key

Update, 12 August 2026. This post originally documented a suspected full-signing oracle built from malformed Paillier material, Type 5 and Type 7 aborts, and weaknesses in THORChain’s TSS transport wrapper. THORSec’s later technical disclosure confirmed our malformed-key and residue-leak findings but revealed a simpler, complete exploit. Bob’s ordinary MtA proof leaked the mask that our test…