🧮 PHPCoinAddress: Years of Weak Bitcoin Wallets from mt_rand()

On 30 January 2026, Milk Sad began a series on PHPCoinAddress, a PHP-based Bitcoin paper-wallet generator whose mt_rand() — in two variants, MT_RAND_PHP and MT_RAND_MT19937 — produced predictable seeds. 17,652 unique weak Bitcoin wallets were found, with historic transaction volume exceeding 7,700 BTC; three waves of systematic theft occurred between 2015 and 2018.