# Weak Key Generation Becomes a Recurring Failure

Defects in how keys and seeds are generated, not attacks on the underlying cryptography, will keep producing breaches across certificate authorities, wallets and custody systems, so randomness auditing becomes a standard part of security review.

- Conviction: 40 / 100 (forming)
- Horizon: Emerging (watchlist)
- Tracking since: 2026-10-21T00:00:00.000Z
- Last updated: 2026-10-21T06:18:19.997Z
- Canonical: https://polylog.news/crypto/trends/weak-key-generation-failures
- Publisher: Polylog
- Affected regions: Global

## Recent evidence

- [confirms] Eight eMudhra Certificate Keys Were Tiny Numbers Such as 4, and Browsers Blocked Them (2026-10-21): Eight intermediate certificate keys from Indian CA eMudhra were tiny numbers such as 4 and could be cracked in under a second, so browsers blocked them. Anyone holding one could have issued a trusted certificate for any site, including exchange and wallet download pages. The failure was in key generation, not the cryptography, and it reached certificate authorities, as the thesis predicts.
- [confirms] Qubic Restarts Its Chain After Weak Apple-Device Wallet Seeds Let an Attacker Drain $1.4 Million (2026-10-21): Qubic restarted its chain after weak wallet seeds generated on Apple devices let an attacker drain $1.4M from 1,404 holders. Validators froze about 87.1% of the stolen QU, and MEXC froze the account that received the rest. It is a second key-generation failure in one edition, this time in wallet software instead of a certificate authority, which supports the idea that it recurs across layers.