CHALLENGE? Toto/signature attack w. unpublished public key

[Anonymous]

This value is wrong: it has 3 bytes of 0's inserted and is therefore
missing the last three bytes of the signature.

s =   0x08F4D5CBC10063725B206F787EB7370BBD0C5B4854CE79A9007D1801AEAEE6E6
        D2C68D7EDF877FECE1FA539D08BEC54BD152BA05113951E8A84CDECAD2CB8E7A
        C28BE916570BA7BB9C00C64DF57113C4AE81613BD351541523CD3A028FBF220E
        F7469BD4175302DCB5B6E886974877F28A2D301433AFFFE26081008BFF687B37


Here is the correct value, from the signed message.

08F4D5CBC10063725B206F787EB7370BBD0C5B4854CE79A97D1801AEAEE6E6D2
C68D7EDF877FECE1FA539D08BEC54BD152BA05113951E8A84CDECAD2CB8E7AC2
8BE916570BA7BB9CC64DF57113C4AE81613BD351541523CD3A028FBF220EF746
9BD4175302DCB5B6E886974877F28A2D301433AFFFE260818BFF687B37DE8167