Tezos Wallets Were Reportedly Vulnerable to ‘Blind Sig’ Attacks; Issue Now Fixed

Apparently, Tezos (XTZ) has an inherent flaw that would allow users with bad intentions to perform blind signature (blind sig) attacks. The information was released by the Reddit user tzlibre a few days ago on the r/tzlibre subreddit. As per the user, most KYC-Tezos wallets they've tested are vulnerable to a simple but catastrophic attack that could lead to users losing their funds. In order to demonstrate it, they've exposed a malicious RPC to test wallets in which they warn that funds could be lost. The post written by tzlibre reads as follows: "These wallets connect to a server (the RPC node) but they do not build the raw tx like normal cryptocurrency wallets, nor do they check the binary provided by the RPC before signing it. Should the RPC get hacked (or turn malicious) it will provide clients with a malicious tx to sign: with no way to parse the binary, the unsuspecting user will sign a tx which sends 100% of their funds to the attacker's address." According to the post, there