SlowMist: Qubic Wallet Has Security Vulnerability; Private Key Could Be Recovered Through 6 Consecutive Network Observations
The SlowMist security team discovered during an analysis of the Qubic wallet that it uses the same non-cryptographically secure random number data stream (Math.random()) for both generating the account seed and producing the dejaVu identifier values disclosed in network packet headers, potentially allowing private keys to be recovered through network observation.
