random

Milk

Bitcoin

when

Bitcoin Private

Cryptocurrency self-custody wallet OneKey has revealed a vulnerability that could impact up to 120,000 Bitcoin private keys. The flaw stems from the Libbitcoin Explorer (bx) 3.x library, which several wallets used to generate private keys. The issue, discovered after the Milk Sad incident, exposes wallets to brute-force attacks because the library relied on a weak random-number algorithm.&nbsp;
According to the <a href="https://help.onekey.so/en/articles/11461224-onekey-app-random-number-security-testing" target="_blank" rel="noopener noreferrer nofollow">OneKey report</a>, the problem originated from bx’s use of the Mersenne Twister-32 algorithm. It generated random numbers using only the system time as a seed, which limited randomness to 2³² possible values. Consequently, attackers could predict wallet keys by testing all possible seeds within days.&nbsp;
“The vulnerability disclosed in the Milk Sad incident does not affect the mnemonic or private key security of any OneKey hardware or software wallet,” the company confirmed on X.&nbsp;
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
 <blockquote class="twitter-tweet">
 The vulnerability disclosed in the Milk Sad incident does not affect the mnemonic or private key security of any OneKey hardware or software wallet. Vulnerability Overview The issue originated from Libbitcoin Explorer (bx) 3.x, which generated random numbers using the Mersenne… <a href="https://t.co/BsqhFIeNsl" rel="noopener noreferrer nofollow">pic.twitter.com/BsqhFIeNsl</a>— OneKey (@OneKeyHQ) <a href="https://twitter.com/OneKeyHQ/status/1979192716350361645?ref_src=twsrc%5Etfw" target="_blank" rel="noopener noreferrer nofollow">October 17, 2025</a>
 </blockquote>
 </div>
</figure>
<h2 class="wp-block-heading" id="onekey-s-security-evaluation">OneKey’s security evaluation</h2>
OneKey conducted a comprehensive test across macOS, Windows, Android, and iOS to assess the quality of its mnemonic generation. The findings confirmed that all platforms use cryptographically secure random number generators following NIST SP 800-22 and FIPS 140-2 standards. Moreover, OneKey’s browser version uses a built-in Chrome security tool to create random numbers, while its Android and iOS apps use secure systems built into each phone’s operating system.
Besides, every OneKey hardware wallet has its own chip that makes random numbers inside the device, following strict security rules to lower tampering risks. Older models also use built-in systems that meet global security checks. However, OneKey advised users not to move recovery phrases made on software wallets into hardware ones, since weaker randomness could make private keys easier to guess.
At the same time, experts from Cisco Talos and <a href="https://cloud.google.com/blog/topics/threat-intelligence/dprk-adopts-etherhiding/" target="_blank" rel="noopener noreferrer nofollow">Google</a> found that a North Korean hacking group called Famous Chollima is hiding malware inside blockchain smart contracts. The group uses a new trick called “EtherHiding” to sneak in harmful code, mainly targeting job seekers through fake interviews to steal their crypto and personal information.
The discovery shows how crucial real randomness is when creating wallet keys. Hardware wallets that generate their own keys make it harder for hackers to guess them.
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 Also Read: <a href="https://www.cryptotimes.io/2025/10/17/binance-investigated-by-french-authorities-for-money-laundering/" target="_blank" rel="noopener noreferrer nofollow">Binance Investigated by French Authorities for Money Laundering</a>
</blockquote>

OneKey Identifies Flaw Threatening 120K Bitcoin Private Keys

Table of Contents

The Crypto Times

Other articles published on Oct 18, 2025

Join our free newsletter for daily crypto updates!