diff --git a/package.json b/package.json
index 63c18fe..19f873c 100644
--- a/package.json
+++ b/package.json
@@ -62,7 +62,7 @@
     "bip32": "^2.0.4",
     "bip39": "^3.0.2",
     "crypto-browserify": "^3.12.0",
-    "crypto-js": "^3.1.9-1",
+    "crypto-js": "^4.1.1",
     "events": "^3.1.0",
     "google-protobuf": "3.13.0",
     "grpc-web": "^1.2.1",
diff --git a/yarn.lock b/yarn.lock
index b9d0dd1..e4030b8 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2530,10 +2530,10 @@ crypto-browserify@^3.12.0:
     randombytes "^2.0.0"
     randomfill "^1.0.3"
 
-crypto-js@^3.1.9-1:
-  version "3.3.0"
-  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-3.3.0.tgz#846dd1cce2f68aacfa156c8578f926a609b7976b"
-  integrity sha512-DIT51nX0dCfKltpRiXV+/TVZq+Qq2NgF4644+K7Ttnla7zEzqc+kjJyiB96BHNyUTBxyjzRcZYpUdZa+QAqi6Q==
+crypto-js@^4.1.1:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.1.1.tgz#9e485bcf03521041bd85844786b83fb7619736cf"
+  integrity sha512-o2JlM7ydqd3Qk9CA0L4NL6mTzU2sdx96a+oOfPu8Mkl/PK51vSyoi8/rQ8NknZtk44vq15lmhAj9CIAGwgeWKw==
 
 crypto-random-string@^2.0.0:
   version "2.0.0"