OneKey Confirms Hardware and Software Wallets Unaffected by 'Milk Sad' Vulnerability

OneKey reveals that a vulnerability in the bx 3.x implementation, linked to predictable key generation, could affect up to 120,000 Bitcoin private keys but assures that its wallets remain secure.

BTC

Summary

OneKey has disclosed a vulnerability in the libbitcoin-explorer (bx) 3.x implementation, which may impact the generation of 120,000 Bitcoin private keys due to predictable randomness. The issue is linked to the use of the Mersenne Twister 32 algorithm and system time, creating a predictable 2^32-bit seed space. However, OneKey clarified that its hardware and software wallets remain unaffected as the issue is specific to the key generation process in bx 3.x, not the Bitcoin blockchain itself.

Terms & Concepts
  • Mersenne Twister 32: A pseudorandom number generator algorithm that produces random numbers but can be predictable if the seed or system time used is not sufficiently random.
  • Libbitcoin Explorer (bx) 3.x: A tool used for Bitcoin-related software development that includes an implementation of a random number generator that was found to be vulnerable in certain versions.