VULNERABILITY INTELLIGENCE

CVE-2022-40769

CVSS score7.5 HIGH
EPSS probability1.49%
CISA KEVNot currently listed
Published2022-09-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.

Weakness classification

  • nvd@nist.gov: CWE-338

Primary references