Layer 2, Dlc, Bitcoin.
R)$ If the Oracle reuses the nonce k, then after two settlements, an attacker can solve the system of equations based on the Oracle’s broadcast signatures to deduce the Oracle’s private key z in one of four possible scenarios, case 1: $s_1=k-hash(OddNumber_1, R) ⋅ z$ $s_2=k-hash(OddNumber_2, R) ⋅