CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations

published September 18, 2022

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01492 · 73.9th percentile
Published
2022-09-18T16:01Z
EPSS history
Timeline
  • 18 SEP 16:01Z
    profanity through 1.60 has only four billion possible RNG initializations
    cvelistv5