[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:cryptojs-weak-rng-behind-5-7-million-in-drains-affects-five-crypto-wallet-apps-msk9pj08":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":12,"action_required":18,"article_ids":19,"ioc_summary":21,"source_urls":22,"status":24,"expires_at":25,"created_at":26,"updated_at":27,"articles":28},"1da0dd32-78c7-4031-a498-7a90c9d94e47","CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps","cryptojs-weak-rng-behind-5-7-million-in-drains-affects-five-crypto-wallet-apps-msk9pj08","A decade-old weak RNG vulnerability in CryptoJS has enabled attackers to guess recovery phrases and drain cryptocurrency wallets, resulting in $5.7M+ in confirmed losses across five wallet apps. Affected users cannot patch their way out. this requires immediate fund migration to new wallets with properly generated recovery phrases.","critical","advisory",[],[13,14,15,16,17],"CryptoJS","RRWallet","Bexo Wallet","NanChat","Bitcoin Libre","Identify any CryptoJS implementations in your environment generating cryptographic material. Flag wallet applications using CryptoJS for RNG. Alert users of affected wallets immediately and direct them to migrate funds to alternatives with secure entropy sources.",[20],"964564ce-03e4-4ed0-aa6d-c193a5dca4a5",null,[23],"https:\u002F\u002Fthehackernews.com\u002F2026\u002F08\u002Fcryptojs-weak-rng-behind-57-million-in.html","archived","2026-08-10T11:05:44.235+00:00","2026-08-08T11:05:46.684925+00:00","2026-08-10T12:06:11.854424+00:00",[29],{"id":20,"title":6,"url":23}]