Skip to main content
AVOID.NET

v1 → v2

Scores

trust_score4 → 3
severity_base— → —
score_modifier0 → -1.4

Sections

Vulnerability Overview

unchanged

Affected Wallet Applications

unchanged

Exploitation Campaign and Measured Losses

unchanged

Technical Root Cause: Entropy Collapse

unchanged

Disclosure Timeline and Researcher Attribution

unchanged

Remediation Guidance and User Risk

unchanged

Broader Context: Supply Chain and Ecosystem Risk

unchanged

Timeline events

+ added2020-05 — (no description)
+ added2023 — (no description)
+ added2026-05 — (no description)
- removed2020-05-01 — (no description)
- removed2023-01-01 — (no description)
- removed2026-05-01 — (no description)

Accepted submissions

+ addedurlincriminating{"url":"https://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.html","kind":"url"}

Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.

v1 hash: cd947987ff2b7b9ce3cb8a78a439977d8341d44f7dda6a64f28f3f5b5281fa78
v2 hash: 4jdproehMtCgnrnn8DLAX9ysKTLvyyF1nRZUuWeoCMog