Bitkey app used a non-cryptographic random generator for contact enrollment
Second-generation Bitkey users who enrolled Recovery Contacts or inheritance beneficiaries used secrets generated with a predictable random generator. Bitkey states the bug could not on its own give access to funds and that no customer was exploited.