diff --git a/_posts/2024-01-23-research-update-5.md b/_posts/2024-01-23-research-update-5.md index 5ad9a6f..7225ed5 100644 --- a/_posts/2024-01-23-research-update-5.md +++ b/_posts/2024-01-23-research-update-5.md @@ -30,9 +30,9 @@ The newly disclosed vulnerability comes in two forms. Together with the previous | Issue | When | Characteristics | Research | ID | | -- | -- | -- | -- | -- | -- | -- | -- | -| vulnerable Trust Wallet browser extension | 2022/2023 | Mersenne Twister based | [research update #2]({% link _posts/2023-12-06-research-update-2.md %}) | - | -| vulnerable Trust Wallet iOS app - **variant A** | Mid-2018 | `LCG16807` `MINSTD_RAND0`
+ `trezor-crypto` [2e528be](https://github.com/trezor/trezor-crypto/commit/2e528be1e91dd48c0e55061fbdd40ccf8b285559) | this article | CVE-2024-23660 ? | -| vulnerable Trust Wallet iOS app - **variant B** | Mid-2018 | `LCG16807` `MINSTD_RAND0`
+ `trezor-crypto` [009850](https://github.com/trezor/trezor-crypto/commit/009850f6c9afcf60b4c6280afd46868b1a7a1fdd) | this article | CVE-2024-23660 ? | +| vulnerable Trust Wallet browser extension | 2022/2023 | Mersenne Twister based | [research update #2]({% link _posts/2023-12-06-research-update-2.md %}) | CVE-2023-31290 | +| vulnerable Trust Wallet iOS app - **variant A** | Mid-2018 | `LCG16807` `MINSTD_RAND0`
+ `trezor-crypto` [2e528be](https://github.com/trezor/trezor-crypto/commit/2e528be1e91dd48c0e55061fbdd40ccf8b285559) | this article | CVE-2024-23660 | +| vulnerable Trust Wallet iOS app - **variant B** | Mid-2018 | `LCG16807` `MINSTD_RAND0`
+ `trezor-crypto` [009850](https://github.com/trezor/trezor-crypto/commit/009850f6c9afcf60b4c6280afd46868b1a7a1fdd) | this article | CVE-2024-23660 | Each weak PRNGs variant creates different ranges of weak wallets. This article is _exclusively_ about the two newly discovered variants, and does not cover the Mersenne Twister based vulnerability. @@ -140,8 +140,8 @@ Notably, there is a visible peak in the graph of outgoing transfers of the month Early estimations for on-chain funds movement volume: -| Variant A | ca. **389.5 BTC** | 2010-01-01 to 2025-01-01 | -| Variant B | ca. **377.2 BTC** | 2018-01-01 to 2020-01-01 | +| Variant A | ca. **389,5 BTC** | 2010-01-01 to 2025-01-01 | +| Variant B | ca. **377,2 BTC** | 2018-01-01 to 2020-01-01 | Note: this describes funds moved over the weak wallets that have been at risk at some point, not the amounts stolen by attackers.