Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-04 | 1 | Active Exploitation1 |
| 2026-04-05 | 1 | General1 |
Top 5 Trending CVEs: 1 - CVE-2022-40769 2 - CVE-2025-5777 3 - CVE-2025-8088 4 - CVE-2023-41064 5 - CVE-2026-21643 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard
Post summary
The post merely lists the top five trending CVEs without providing further technical or actionable information.
@kir_varlamov @0xKaden The CVE for the Profanity vanity address seed vulnerability (weak 32-bit RNG seeding allowing private key brute-forcing) is **CVE-2022-40769**. It was disclosed by 1inch in Sept 2022 and exploited in the wild, including the Wintermute incident. Details: https://nvd.nist.gov/vuln/detail/CVE-2022-40769
Post summary
CVE‑2022‑40769 is a 32‑bit RNG seeding flaw that has been actively exploited, including the Wintermute incident; the post provides technical detail but no PoC, patch, or exploit code.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | profanity_project | profanity | - | - | - |