#cryptojs
-
Weak Random Number Generator in CryptoJS Led to $5.7M in Crypto Wallet Thefts
The firm Coinspect has determined that the source of a string of crypto wallet thefts was the CryptoJS.lib.WordArray.random() function, which produced predictable seed phrases. Five applications were affected, and measured losses topped $5.7 million.