CryptoJS Library Vulnerability Exposed: At Least $5.69 Million in Traced Theft

A weakness in software used by at least five crypto wallets has made some recovery phrases predictable enough for attackers to reconstruct, contributing to at least $5.69 million in traced thefts since May.

The vulnerable code was introduced in June 2014 as part of an attempt to strengthen the WordArray.random() function in the CryptoJS library, according to blockchain security firm Coinspect.

The affected wallets include RRWallet, Bexo Wallet, NanChat, Bitcoin Libre, and Milo. The firm traced about $3.14 million drained on May 27 and another $2.55 million between May 30 and July 13. There was also a third wave between July 20 and 21, which drained around $40,000 across the Chinese-mnemonic subset.

The security firm's analysis covered more than 2,000 seeds with activity across Bitcoin, Ethereum, Tron, Rootstock, and Polygon. However, the affected wallets list may not be exhaustive, and exposure depends on the software version that originally generated the phrase rather than the brand alone.