BLS12-381 Rogue Key Attacks

[MaxMustermann2]

The x/avs module is vulnerable to rogue key attacks. An attacker can combine fake keys or signatures to bypass security checks, which could weaken the system.

Proposed Solution

Require users to prove they own their keys before using them. This can be done by asking them to submit a small extra signature when registering their key. Typically such a message should contain the protocol name (exocore) to prevent replay attacks on other chains and the operator's own address to prevent usage by another operator upon the first operator's withdrawal from the system.