Weak CryptoJS RNG Behind $5.7M Crypto Drain in Five Wallet Apps
A weak random number generator in the widely used CryptoJS library allowed attackers to predict private keys and drain approximately $5.7 million from five cryptocurrency wallet applications. The flaw stems from an outdated RNG, and users of affected wallets are urged to transfer funds immediately. This incident underscores the critical need for auditing cryptographic dependencies.