Digital Asset
Intelligence
Security Incident · Wallet

RRWallet Supply Chain Attack: $2.00M Reported Loss

·Historical incident record

Incident Overview

Security firm Coinspect disclosed that RRWallet (RenrenBit’s wallet) generated vulnerable seed phrases due to a weak RNG in the CryptoJS library (Ill Bloom vulnerability, CVE-2026-71851), making private keys predictable and leading to theft. One user lost approximately $2 million.

Sources & References

Original incident referencehttps://x.com/coinspect/status/2085430121670811898 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    ZEUS

    Attack methodInfrastructure Compromise
    Reported loss0
  2. Incident date
    Target

    Bankrbot

    Attack methodAccount Compromise
    Reported loss$ 479,885
  3. Incident date
    Attack methodOracle Misassignment
    Reported loss$ 73,400
  4. Incident date
    Attack methodPrivate Key Leakage
    Reported loss0
  5. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 17,750