🌪️ The Randstorm Vulnerability Disclosed
On 14 November 2023, Unciphered published Randstorm — a weak SecureRandom() in the JSBN library (used by BitcoinJS through March 2014) combined with unreliable browser Math.random() from the 2011–2015 era. Unciphered: "potentially affects millions of cryptocurrency wallets that were generated in the 2011-2015 timeframe." Blockchain.com, BitGo, BitPay, Coinkite were notified.
