<p><strong>What products are effected by these vulnerabilties?</strong> </p>

<p>-- Not Sure specific products, but watch out for products(wallets) using javascript lib to generate private keys.</p>

<p><strong>As a user of these products, what should I do to make myself no longer vulnerable?</strong></p>

<p>-- you should immediately move your funds to new addresses, make sure new wallet does not suffer from this known vulnerability.</p>

CC BY-SA 3.0
2018-04-10T17:18:32.993Z
2018-04-10T17:18:32.993Z
kherwa
<p>A recent <a href="https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-April/015873.html" rel="nofollow noreferrer">post</a> on the Bitcoin-dev mailing list talks about multiple vulnerabilities in JavaScript SecureRandom() class. Apparently this class has been used in multiple cryptocurrency wallets that use JavaScript to generate private keys.</p>

<p>What products are affected by these vulnerabilities? As a user of these products, what should I do to make myself no longer vulnerable?</p>

<security><javascript><weaknesses>
How do the JavaScript SecureRandom() vulnerabilities affect me?
Ava Chow
# How do the JavaScript SecureRandom() vulnerabilities affect me?

(Asked by: username_0 on 2018-04-10)

A recent [post](https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018-April/015873.html) on the Bitcoin-dev mailing list talks about multiple vulnerabilities in JavaScript SecureRandom() class. Apparently this class has been used in multiple cryptocurrency wallets that use JavaScript to generate private keys.

What products are affected by these vulnerabilities? As a user of these products, what should I do to make myself no longer vulnerable?

**Tags:** security, javascript, weaknesses


---

## 1 answers

### Answer by username_1 on 2018-04-10. Score: 1

**What products are effected by these vulnerabilties?**

-- Not Sure specific products, but watch out for products(wallets) using javascript lib to generate private keys.

**As a user of these products, what should I do to make myself no longer vulnerable?**

-- you should immediately move your funds to new addresses, make sure new wallet does not suffer from this known vulnerability.


---

