diff --git a/packages/bitcore-client/package-lock.json b/packages/bitcore-client/package-lock.json
index 79b772cf39c..6a7c5470309 100644
--- a/packages/bitcore-client/package-lock.json
+++ b/packages/bitcore-client/package-lock.json
@@ -1189,17 +1189,24 @@
       "integrity": "sha1-WQxhFWsK4vTwJVcyoViyZrxWsh0="
     },
     "elliptic": {
-      "version": "6.4.1",
-      "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.4.1.tgz",
-      "integrity": "sha512-BsXLz5sqX8OHcsh7CqBMztyXARmGQ3LWPtGjJi6DiJHq5C/qvi9P3OqgswKSDftbu8+IoI/QDTAm2fFnQ9SZSQ==",
+      "version": "6.5.4",
+      "resolved": "https://registry.npmjs.org/elliptic/-/elliptic-6.5.4.tgz",
+      "integrity": "sha512-iLhC6ULemrljPZb+QutR5TQGB+pdW6KGD5RSegS+8sorOZT+rdQFbsQFJgvN3eRqNALqJer4oQ16YvJHlU8hzQ==",
       "requires": {
-        "bn.js": "^4.4.0",
-        "brorand": "^1.0.1",
+        "bn.js": "^4.11.9",
+        "brorand": "^1.1.0",
         "hash.js": "^1.0.0",
-        "hmac-drbg": "^1.0.0",
-        "inherits": "^2.0.1",
-        "minimalistic-assert": "^1.0.0",
-        "minimalistic-crypto-utils": "^1.0.0"
+        "hmac-drbg": "^1.0.1",
+        "inherits": "^2.0.4",
+        "minimalistic-assert": "^1.0.1",
+        "minimalistic-crypto-utils": "^1.0.1"
+      },
+      "dependencies": {
+        "bn.js": {
+          "version": "4.11.9",
+          "resolved": "https://registry.npmjs.org/bn.js/-/bn.js-4.11.9.tgz",
+          "integrity": "sha512-E6QoYqCKZfgatHTdHzs1RRKP7ip4vvm+EyRUeE2RF0NblwVvb0p6jSVeNTOFxPn26QXN2o6SMfNxKp6kU8zQaw=="
+        }
       }
     },
     "encodeurl": {
diff --git a/packages/bitcore-client/package.json b/packages/bitcore-client/package.json
index 73d5342c657..51c1c06c465 100644
--- a/packages/bitcore-client/package.json
+++ b/packages/bitcore-client/package.json
@@ -31,7 +31,7 @@
     "bitcore-mnemonic": "^8.16.0",
     "commander": "2.15.1",
     "crypto-wallet-core": "^8.16.0",
-    "elliptic": "6.4.1",
+    "elliptic": "6.5.4",
     "level-js": "4.0.2",
     "leveldown": "5.4.1",
     "levelup": "4.3.2",