A historical Vultisig flaw could let one compromised signer recover a full private key via repeated malicious messages, @chain_security found. August Android and iOS updates stop retries once a signer is flagged as malicious. Analysis by @akibablade