Blockchain security firm Coinspect has identified a critical vulnerability in the popular JavaScript cryptography library CryptoJS, specifically in the CryptoJS.lib.WordArray.random() function, which…
A critical vulnerability in CryptoJS's random number generator reduces entropy for security-sensitive values, enabling brute-force attacks. Affects all versions below 4.0.0.
A threat actor exploited the CryptoJS weak RNG to drain over $5.7 million from cryptocurrency wallets across multiple networks.
A widely used JavaScript library with a critical weak RNG flaw in versions below 4.0.0, affecting cryptocurrency wallet recovery phrase generation.