DevThe Hacker Newsabout 2 hours ago
CryptoJS Weak RNG Linked to $5.7M Wallet Drains
1 min read
CryptoJS.lib.WordArray.random() supplied weak entropy for recovery-phrase generation, enabling theft of roughly $5.7 million across five wallet apps. The vulnerable generator reduced 128-bit entropy to about 2^39, making phrases guessable. Affected apps include RRWallet, Bexo, Bitcoin Libre, Milo, and NanChat.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
