https://davidgerard.co.uk/blockchain/2018/04/11/javascript-securerandom-isnt-securely-random-most-web-wallets-affected-and-the-bug-was-warned-of-five-years-ago/
JavaScript SecureRandom() isn't securely random — many old web wallets affected — and the bug was warned of five years ago (UPDATED)