CVE-2023-39910
HIGH EXPLOITED IN THE WILDLibbitcoin Explorer <3.6.0 - Info Disclosure
Title source: llmExploitation Summary
CVE-2023-39910 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 5 public exploits from researchers including z1ph1us, demining, Hitplus.
AI-analyzed exploit summary This repository contains a functional tool designed to exploit the 'Milk Sad' vulnerability (CVE-2023-39910) by generating BIP-39 mnemonic phrases using Unix timestamps as an entropy source. It includes both CLI and GUI applications to generate mnemonics for specific dates, date ranges, or the entire 32-bit timestamp range.
Description
The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet private keys generated from "bx seed" entropy output and steal funds. (Affected users need to move funds to a secure new cryptocurrency wallet.) NOTE: the vendor's position is that there was sufficient documentation advising against "bx seed" but others disagree. NOTE: this was exploited in the wild in June and July 2023.
Exploits (5)
This repository contains a functional tool designed to exploit the 'Milk Sad' vulnerability (CVE-2023-39910) by generating BIP-39 mnemonic phrases using Unix timestamps as an entropy source. It includes both CLI and GUI applications to generate mnemonics for specific dates, date ranges, or the entire 32-bit timestamp range.
This repository contains a functional tool for generating BIP-39 mnemonic phrases based on Unix timestamps, specifically targeting the 'Milk Sad' vulnerability (CVE-2023-39910). It includes both CLI and GUI applications for generating mnemonics across specific dates, date ranges, or the entire 32-bit timestamp range.
This repository contains a detailed writeup discussing hardware-based attacks (Phoenix Rowhammer and RAMnesia) targeting cryptographic systems, specifically Bitcoin wallets, by exploiting memory vulnerabilities (CVE-2025-6202 and CVE-2023-39910). It describes methods for ECDSA key recovery through physical side-channel attacks and flaws in trusted execution environments (TEEs).
The repository lacks actual exploit code and instead directs users to download an external ZIP file, which is a common tactic for distributing malware or fake exploits. The README is vague and focuses on marketing language rather than technical details about CVE-2023-39910.
The repository claims to provide a tool for recovering Bitcoin wallet private keys by exploiting CVE-2023-39910 but contains no actual exploit code. Instead, it directs users to download external releases, which is a common tactic for distributing malware or fake exploits.
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N