Security
CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps
The Hacker News·August 6, 2026·1 min read
Coinspect identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. The function, introduced 12 years ago in the JavaScript cryptography library, supplied weak entropy affecting wallet apps used to generate recovery phrases. On-chain analysis puts the measured theft across two sweeps since late May at a lower bound of $5.7 million.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.