imToken Vulnerability: Mnemonic Phrases Can Be Cracked in Hours
imToken, a leading decentralized crypto wallet, has two critical design flaws in its mnemonic phrase generation mechanism. The underlying pseudorandom number generator (PRNG) seed space is only 48 bits, and the BIP39 wordlist has only 2048 words. Combined, an attacker can reverse-engineer the original mnemonic phrase from the hash in just hours, completely controlling the wallet's assets.14 sourcesSee all sources