CVE-2022-40769: Profanity Project Profanity

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022.

Affected products

• Profanity Project Profanity: up to and including 1.60

Published 2022-09-18. Last modified 2026-06-17.