Vulnerability Overview - OneKey reported a vulnerability affecting approximately 120 thousand Bitcoin private keys [1] - The vulnerability stems from Libbitcoin Explorer (bx) 3x, which uses system time and the Mersenne Twister-32 algorithm with a small 2^32-bit seed space, making keys predictable [1] Affected Products - Affected wallets include Trust Wallet Extension 00172–00183 and Trust Wallet Core ≤311 [1] - Other products using the same libraries are also affected [1]

Cobo co-founder Shenyu claims that US law enforcement has the private keys to 120k bitcoins. The law enforcement agencies did not obtain the private keys through cracking or intrusion, but rather discovered a randomness flaw in the generation of these private keys. The vulnerability affected over 220,000 wallet addresses. The private keys for these wallets were generated by a flawed pseudo-random number generator (PRNG). Because the PRNG uses a fixed offset and pattern, the private keys are more predictable ...

remember: not your keys not your crypto ...

Security Practices - Avoid using Google Chrome extensions unless you understand their implications, and refrain from clicking links on devices used for cryptocurrency activities [1] - Do not save private keys online, including in pictures, screenshots, or notes [1] Risk Management - Secure cryptocurrency holdings exceeding $1,000 with a hardware wallet [1]

Web3 Onboarding - Web3 行业关注用户登录体验，这对于吸引真实用户至关重要 [1] - Sui 构建了两种互补的原语来抽象私钥，同时保留用户控制权 [1] Sui's Primitives - zkLogin 旨在抽象私钥 [1] - Passkey 旨在抽象私钥 [1]

Security Threats - Crypto industry faces SMS phishing attacks aimed at stealing private keys and funds [1] - Scammers utilize fake SMS messages to deceive users [1] Prevention Measures - Users should learn about common phishing types to identify threats [1] - Users should watch for red flags in SMS messages [1] - Users should follow safety guidelines to protect their assets [1]

Crypto Security Basics - Private keys and seed phrases are fundamental for securing cryptocurrency [1] - Private keys unlock access to crypto assets [1] - Seed phrases are used to recover crypto assets [1]