GoBalance Flaw Lets Attackers Hijack .onion Addresses by Recovering Tor-Format Keys

A bug in GoBalance causes it to pass only the first 32 bytes of a 64-byte Tor private key to the signer, leaking the secret value used in signatures and allowing recovery of a site's long-term .onion master private key from a single public descriptor; attackers used this to take over .onion addresses (notably Dread and Omega) by redirecting visitors to attacker-controlled mirrors, and while servers/data were not accessed the only remediation is rotating to a new .onion address since leaked master keys cannot be revoked. No official patch or CVE existed at time of reporting, though an independent proof-of-concept patch has been published.