Milk Sad: Update #10 - Cake Wallet Vulnerability Impact
Thread
"To summarize, the Cake Wallet cryptocurrency wallet software relied on a weak Pseudo Random Number Generator (PRNG) to generate Bitcoin wallets, which is a catastrophic design flaw."
"Looking for actual public usage, we found:
8757 unique weak main wallets
12999 unique sub-accounts (not counting change addresses)
13401 unique addresses (counting change addresses)
ca. 51600 transactions involving these addresses
About 548.9 BTC of funds have moved through them between 2020-11-30 and 2024-10-10."
Login to reply
Replies ()
“The software vendor publicly disclosed this vulnerability in May 2021, released a patched software version and asked users to urgently transfer their affected funds to different wallets. A large majority of users did so, but not all.”