CVE-2023-31290

Trust Wallet Core versions prior to 3.1.1 and the Trust Wallet browser extension versions 0.0.172 through 0.0.182 are vulnerable to fund theft due to insufficient entropy . The root cause is the use of the mt19937 Mersenne Twister PRNG, which takes a single 32-bit value as an input seed, limiting...