The SlowMist company has warned about a disturbing discovery. The Libbitcoin Explorer 3.x tool, which allows exploration of the Bitcoin blockchain, has a major security flaw. The vulnerability stems from an error in the way random numbers are generated, putting user funds at risk. There is a risk that their private keys will be compromised, which could lead to significant financial losses. Milk Sad has shared the details of this alarming incident.
A vulnerability detected on the 3.x versions of Libbitcoin Explorer
According to SlowMist, a serious security flaw has been discovered in Libbitcoin Explorer, the tool for exploring the Bitcoin blockchain. The latter would be linked to the implementation of a pseudo-random number generator (PRNG) by Libbitcoin Explorer. Indeed, PRNGs become susceptible to breaches, using the Mersenne Twister technique and 32 bits of system seed time. So, this vulnerability could compromise users’ private keys of this tool.
According to Milk Sad, when the random number generator is weak, the resulting cryptographic use is almost always compromised. This vulnerability therefore allows attackers to access the private keys of wallets by exploiting the pseudo-random Mersenne Twister. Binance’s CZ, said on Twitter that he is in favor of self-managed wallets, provided you know how to use them. However, he acknowledges that these types of crypto wallets are not without risk.
User funds are at risk
Several cryptos including Bitcoin, Ethereum, Solana, Dogecoin, Litecoin or Zcash are currently exposed to this vulnerability. Milk Sad reports that this vulnerability would have resulted in an approximate loss of $900,000. He explains that malicious actors actively exploited this flaw to steal funds from affected wallets on multiple blockchains.
This issue highlights the importance of crypto wallet security. A report by the CER revealed that 86.7% of crypto wallet brands do not perform penetration testing. This is a method for detecting security vulnerabilities in software.
In sum, the vulnerability on Libbitcoin Explorer reminds us that even major crypto platforms are not immune to security issues. It is therefore imperative for the crypto sector to reassess its approach to security patches and rapid responses to identified problems.
Receive a digest of news in the world of cryptocurrencies by subscribing to our new service of daily and weekly so you don’t miss any of the essential Tremplin.io!
