diff --git a/sdks/js-sdk/package.json b/sdks/js-sdk/package.json
index 393d004c3..68651a01c 100644
--- a/sdks/js-sdk/package.json
+++ b/sdks/js-sdk/package.json
@@ -100,7 +100,7 @@
     "@xmtp/proto": "^3.68.0",
     "@xmtp/user-preferences-bindings-wasm": "^0.3.6",
     "async-mutex": "^0.5.0",
-    "elliptic": "^6.5.7",
+    "elliptic": "^6.6.0",
     "long": "^5.2.3",
     "viem": "2.7.15"
   },
diff --git a/yarn.lock b/yarn.lock
index cbd2d21b6..7569694e6 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5024,7 +5024,7 @@ __metadata:
     "@xmtp/user-preferences-bindings-wasm": "npm:^0.3.6"
     async-mutex: "npm:^0.5.0"
     benny: "npm:^3.7.1"
-    elliptic: "npm:^6.5.7"
+    elliptic: "npm:^6.6.0"
     ethers: "npm:^5.7.2"
     happy-dom: "npm:^15.7.4"
     long: "npm:^5.2.3"
@@ -6467,6 +6467,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"elliptic@npm:^6.6.0":
+  version: 6.6.0
+  resolution: "elliptic@npm:6.6.0"
+  dependencies:
+    bn.js: "npm:^4.11.9"
+    brorand: "npm:^1.1.0"
+    hash.js: "npm:^1.0.0"
+    hmac-drbg: "npm:^1.0.1"
+    inherits: "npm:^2.0.4"
+    minimalistic-assert: "npm:^1.0.1"
+    minimalistic-crypto-utils: "npm:^1.0.1"
+  checksum: 10/27575b0403e010e5d7e7a131fcadce6a7dd1ae82ccb24cc7c20b275d32ab1cb7ecb6a070225795df08407441dc8c7a32efd986596d48d1d6846f64ff8f094af7
+  languageName: node
+  linkType: hard
+
 "emoji-regex@npm:^8.0.0":
   version: 8.0.0
   resolution: "emoji-regex@npm:8.0.0"