Skip to main content
AVOID.NET

v2 → v3

Scores

trust_score3 → 3
severity_base— → —
score_modifier-1.4 → -1.4

Sections

Vulnerability Overview

unchanged

Affected Wallet Applications

unchanged

Exploitation Campaign and Measured Losses

unchanged

Technical Root Cause: Entropy Collapse

unchanged

Disclosure Timeline and Researcher Attribution

unchanged

Remediation Guidance and User Risk

unchanged

Broader Context: Supply Chain and Ecosystem Risk

unchanged

Timeline events

No timeline changes.

Accepted submissions

- removedurlincriminating{"url":"https://thehackernews.com/2026/08/cryptojs-weak-rng-behind-57-million-in.html","kind":"url"}

Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.

v2 hash: 4jdproehMtCgnrnn8DLAX9ysKTLvyyF1nRZUuWeoCMog
v3 hash: 6b945eff75a6e6a81d52cd1860b27539faf6bbe07878b1fadb1b09a8c72137df