CERT/CC recommended keeping chain codes confidential and avoiding reliance on hardened key derivation to isolate signer shares until Fireblocks corrects its mpc-lib library implementation.