A vulnerability in the Bitcoin (BTC) C++ development library may expose more than 120,000 wallets globally to brute force attacks (a method used by hackers to find passwords).
This issue was discovered in the Libbitcoin Explorer (bx) library version 3.x, and due to a weakness in random number generation, it has become much easier for hackers to guess the recovery phrase (seed phrase).
First identified in November 2023, the vulnerability continues to leave non-custodial Bitcoin wallets vulnerable. The Mersenne Twister-32 algorithm is initialized only with system time and has a limited space for generating random numbers. This limitation results in the ability for hackers to mine private keys and steal assets in a short period of time.
To protect their assets, users of vulnerable wallets built between 2017 and 2023 are advised to transfer their assets to new wallets equipped with CSPRNG technology, create new recovery phrases, and check their paper or hardware wallets. It is also essential to use the latest software and operating system versions.
