Security· ★★· neutral·

Neo ships N3 v3.10.2 patch closing multisig witness verification bypass

  • —Patch closes inconsistency between multisig script validation paths
  • —A malformed public key could pass structural checks without cryptographic decoding
  • —Two new tests added and TestIsMultiSigContract_WrongCurve updated
  • —No formal security advisory or confirmed mainnet exploitation
Why it matters: Node operators and infrastructure providers on Neo N3 should upgrade to v3.10.2 to prevent acceptance of invalid multisig transactions.
#NEO
Source: Cryptonews.net
More on this
DeFi · Sep 28
R3E Network deploys multi-L2 elastic network prototype to Neo N3 TestNet
 DeFi · Oct 2
Neo SPCC ships NeoFS Node, SDK and Panel updates with online storage reshaping and ReplicateV2
 DeFi · Oct 18
Chainlink ships CCIP 2.0 with per-institution verification and 3-of-5 signer quorum