🌰 Milk Sad Digs Further: Weak RNG in the bip3x Library

On 4 January 2024, the Milk Sad team disclosed that the BIP39 library bip3x (used in Android and Windows wallets since 2019) uses, on Windows, "the very insecure MT19937 Mersenne Twister seeded with the local system time," and on other platforms a cryptographically unsound PCG-XSH-RR generator. Same class of bug as Libbitcoin: a predictable seed makes the seed phrase brute-forceable.