Just finished my new article, describing how Wagner's Attack was used to break the first draft of MuSig in 2018. https://conduition.io/cryptography/wagner/