Crypto Wallet Users Hit By Suspicious Activity Caused By Low Entropy Smirk

A crypto wallet service – Clever – revealed that an already known exploit has affected many users due to a low-entropy mnemonic. The incident first came to light after users reported suspicious activity on their wallets earlier this week.

According to an update from the company, the algorithm used by the Bip39 implementation, called random generation, has been previously used by several cryptocurrency wallet providers. However, a flaw in the algorithm compromised the security and unpredictability of the keys generated, leaving the wallet vulnerable to unauthorized access or malicious activities.

• addressing the event, clever Said All affected wallets were imported into Clever Wallet K5.
• These wallets were not originally created using the Clever Wallet K5, but were previously created using an outdated and ineffective pseudo-random number generator (PRNG) method as their source of entropy.
• According to the company, this algorithm was widely used in early versions of various crypto wallet providers, which relied on the JavaScript platform.
• It also highlighted that such a weak PRNG algorithm could significantly compromise the security and unpredictability of the generated keys, potentially making them more vulnerable to attacks or unauthorized access.

On the Clever platform, the core code responsible for entropy and mnemonic generation using PRNG algorithms is implemented with strong security measures and is core to the operating system.

• Clever said the incident is similar to one reported by the TrustWallet Explorer extension in early April.
• The Company has advised users who currently have any old wallet that was created prior to Clever Wallet, to immediately migrate to a new wallet created on Clever Wallet K5 or Clever Safe.
• initial screening suggested This suspicious activity was not unique to Clever and users of multiple wallet providers have been affected.