Trail of Bits warns that TEE rollback flaws can undermine MPC threshold signing

What was reported

Trail of Bits reports that an untrusted host could roll back TEE filesystem state after a threshold signer deletes a used pre-signature, potentially causing nonce-share reuse and disclosure of a private-key share. The post presents this as a deployment risk and recommends treating TEEs as defense in depth alongside sound MPC protocols.

Why it matters

Nonce reuse in threshold-signing systems can expose key material, potentially compromising assets or signing authority managed by the system.

Evidence and limitations

• The source discusses MPC deployments inside trusted execution environments and a filesystem-rollback failure mode.
• No specific affected project, blockchain deployment, contract address, exploit victim, or confirmed loss is identified.

Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to Trail of Bits; they are not presented as deterministic Rug.Tools findings.