diff --git a/Cargo.lock b/Cargo.lock
index ab0dd1b8fd6..4eed203b7bb 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -20,7 +20,7 @@ checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
 dependencies = [
  "cfg-if",
  "cipher",
- "cpufeatures",
+ "cpufeatures 0.2.17",
 ]
 
 [[package]]
@@ -331,7 +331,7 @@ dependencies = [
  "opentelemetry",
  "opentelemetry-otlp",
  "opentelemetry_sdk",
- "rand 0.8.5",
+ "rand 0.10.0",
  "tokio",
  "tracing",
  "tracing-opentelemetry",
@@ -493,7 +493,7 @@ dependencies = [
  "libp2p-webrtc",
  "libp2p-webrtc-websys",
  "mime_guess",
- "rand 0.8.5",
+ "rand 0.10.0",
  "rust-embed",
  "tokio",
  "tokio-util",
@@ -612,7 +612,18 @@ checksum = "c3613f74bd2eac03dad61bd53dbe620703d4371614fe0bc3b9f04dd36fe4e818"
 dependencies = [
  "cfg-if",
  "cipher",
- "cpufeatures",
+ "cpufeatures 0.2.17",
+]
+
+[[package]]
+name = "chacha20"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f8d983286843e49675a4b7a2d174efe136dc93a18d69130dd18198a6c167601"
+dependencies = [
+ "cfg-if",
+ "cpufeatures 0.3.0",
+ "rand_core 0.10.0",
 ]
 
 [[package]]
@@ -622,7 +633,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "10cd79432192d1c0f4e1a0fef9527696cc039165d729fb41b3f4f4f354c2dc35"
 dependencies = [
  "aead",
- "chacha20",
+ "chacha20 0.9.1",
  "cipher",
  "poly1305",
  "zeroize",
@@ -801,6 +812,15 @@ dependencies = [
  "libc",
 ]
 
+[[package]]
+name = "cpufeatures"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b2a41393f66f16b0823bb79094d54ac5fbd34ab292ddafb9a0456ac9f87d201"
+dependencies = [
+ "libc",
+]
+
 [[package]]
 name = "crc"
 version = "3.2.1"
@@ -950,7 +970,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
 dependencies = [
  "cfg-if",
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "curve25519-dalek-derive",
  "digest",
  "fiat-crypto",
@@ -2242,7 +2262,7 @@ dependencies = [
  "libp2p-webrtc",
  "libp2p-webrtc-websys",
  "mime_guess",
- "rand 0.8.5",
+ "rand 0.10.0",
  "redis",
  "reqwest",
  "rust-embed",
@@ -2405,7 +2425,7 @@ version = "0.1.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cb26cec98cce3a3d96cbb7bced3c4b16e3d13f27ec56dbd62cbc8f39cfb9d653"
 dependencies = [
- "cpufeatures",
+ "cpufeatures 0.2.17",
 ]
 
 [[package]]
@@ -2517,7 +2537,7 @@ dependencies = [
  "libp2p-swarm-test",
  "quick-protobuf",
  "quick-protobuf-codec",
- "rand 0.8.5",
+ "rand 0.10.0",
  "rand_core 0.6.4",
  "thiserror 2.0.18",
  "tokio",
@@ -2538,7 +2558,7 @@ dependencies = [
  "libp2p-swarm-derive",
  "libp2p-swarm-test",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "tokio",
 ]
 
@@ -2559,7 +2579,7 @@ dependencies = [
  "parking_lot",
  "pin-project",
  "quick-protobuf",
- "rand 0.8.5",
+ "rand 0.10.0",
  "rw-stream-sink",
  "thiserror 2.0.18",
  "tokio",
@@ -2625,7 +2645,7 @@ dependencies = [
  "libp2p-swarm",
  "quick-protobuf",
  "quick-protobuf-codec",
- "rand 0.8.5",
+ "rand 0.10.0",
  "smallvec",
  "thiserror 2.0.18",
  "tracing",
@@ -2655,7 +2675,7 @@ dependencies = [
  "quick-protobuf",
  "quick-protobuf-codec",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "regex",
  "serde",
  "sha2",
@@ -2702,7 +2722,7 @@ dependencies = [
  "p256",
  "quick-protobuf",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "ring",
  "rmp-serde",
  "sec1",
@@ -2735,7 +2755,7 @@ dependencies = [
  "quick-protobuf",
  "quick-protobuf-codec",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "serde",
  "sha2",
  "smallvec",
@@ -2758,7 +2778,7 @@ dependencies = [
  "libp2p-identity",
  "libp2p-swarm",
  "libp2p-swarm-test",
- "rand 0.8.5",
+ "rand 0.10.0",
  "smallvec",
  "socket2 0.6.3",
  "tokio",
@@ -2817,7 +2837,7 @@ dependencies = [
  "nohash-hasher",
  "parking_lot",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "smallvec",
  "tokio",
  "tracing",
@@ -2850,7 +2870,7 @@ dependencies = [
  "multihash",
  "quick-protobuf",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "snow",
  "static_assertions",
  "thiserror 2.0.18",
@@ -2911,7 +2931,7 @@ dependencies = [
  "libp2p-swarm",
  "libp2p-swarm-test",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "tokio",
  "tracing",
  "web-time",
@@ -2948,7 +2968,7 @@ dependencies = [
  "libp2p-yamux",
  "pin-project",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "salsa20",
  "sha3",
  "tokio",
@@ -2971,7 +2991,7 @@ dependencies = [
  "libp2p-yamux",
  "quickcheck",
  "quinn",
- "rand 0.8.5",
+ "rand 0.10.0",
  "ring",
  "rustls",
  "socket2 0.6.3",
@@ -3001,7 +3021,7 @@ dependencies = [
  "quick-protobuf",
  "quick-protobuf-codec",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "static_assertions",
  "thiserror 2.0.18",
  "tokio",
@@ -3026,7 +3046,7 @@ dependencies = [
  "libp2p-swarm-test",
  "quick-protobuf",
  "quick-protobuf-codec",
- "rand 0.8.5",
+ "rand 0.10.0",
  "thiserror 2.0.18",
  "tokio",
  "tracing",
@@ -3047,7 +3067,7 @@ dependencies = [
  "libp2p-identity",
  "libp2p-swarm",
  "libp2p-swarm-test",
- "rand 0.8.5",
+ "rand 0.10.0",
  "serde",
  "serde_json",
  "smallvec",
@@ -3083,7 +3103,7 @@ dependencies = [
  "libp2p-identity",
  "libp2p-swarm",
  "libp2p-swarm-test",
- "rand 0.8.5",
+ "rand 0.10.0",
  "tokio",
  "tracing",
  "tracing-subscriber",
@@ -3111,7 +3131,7 @@ dependencies = [
  "libp2p-yamux",
  "multistream-select",
  "quickcheck-ext",
- "rand 0.8.5",
+ "rand 0.10.0",
  "smallvec",
  "tokio",
  "tracing",
@@ -3221,7 +3241,7 @@ dependencies = [
  "libp2p-webrtc-utils",
  "multihash",
  "quickcheck",
- "rand 0.8.5",
+ "rand 0.10.0",
  "rcgen",
  "stun",
  "thiserror 2.0.18",
@@ -3246,7 +3266,7 @@ dependencies = [
  "libp2p-noise",
  "quick-protobuf",
  "quick-protobuf-codec",
- "rand 0.8.5",
+ "rand 0.10.0",
  "serde",
  "sha2",
  "tinytemplate",
@@ -4129,7 +4149,7 @@ version = "0.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8159bd90725d2df49889a078b54f4f79e87f1f8a8444194cdca81d38f5393abf"
 dependencies = [
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "opaque-debug",
  "universal-hash",
 ]
@@ -4141,7 +4161,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
 dependencies = [
  "cfg-if",
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "opaque-debug",
  "universal-hash",
 ]
@@ -4410,6 +4430,7 @@ version = "0.10.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "bc266eb313df6c5c09c1c7b1fbe2510961e5bcd3add930c1e31f7ed9da0feff8"
 dependencies = [
+ "chacha20 0.10.0",
  "getrandom 0.4.2",
  "rand_core 0.10.0",
 ]
@@ -5105,7 +5126,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
 dependencies = [
  "cfg-if",
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "digest",
 ]
 
@@ -5116,7 +5137,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "793db75ad2bcafc3ffa7c68b215fee268f537982cd901d132f89c6343f3a3dc8"
 dependencies = [
  "cfg-if",
- "cpufeatures",
+ "cpufeatures 0.2.17",
  "digest",
 ]
 
@@ -5279,7 +5300,7 @@ dependencies = [
  "futures",
  "libp2p",
  "libp2p-stream",
- "rand 0.8.5",
+ "rand 0.10.0",
  "tokio",
  "tracing",
  "tracing-subscriber",
diff --git a/core/Cargo.toml b/core/Cargo.toml
index 25f9b6a7c30..3bf338bc363 100644
--- a/core/Cargo.toml
+++ b/core/Cargo.toml
@@ -23,7 +23,7 @@ multistream-select = { workspace = true }
 parking_lot = "0.12.5"
 pin-project = "1.1.11"
 quick-protobuf = "0.8"
-rand = "0.8"
+rand = "0.10"
 rw-stream-sink = { workspace = true }
 thiserror = { workspace = true }
 tracing = { workspace = true }
diff --git a/examples/autonatv2/Cargo.toml b/examples/autonatv2/Cargo.toml
index c45d9290a70..9e96f8dddca 100644
--- a/examples/autonatv2/Cargo.toml
+++ b/examples/autonatv2/Cargo.toml
@@ -20,7 +20,7 @@ clap = { version = "4.5.60", features = ["derive"] }
 tokio = { version = "1.50.0", features = ["macros", "rt-multi-thread"] }
 tracing = "0.1.44"
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
-rand = "0.8.5"
+rand = "0.10.0"
 opentelemetry = { version = "0.27.0", optional = true }
 opentelemetry_sdk = { version = "0.27.0", optional = true, features = ["rt-tokio"] }
 opentelemetry-otlp = { version = "0.27.0", optional = true }
diff --git a/examples/browser-webrtc/Cargo.toml b/examples/browser-webrtc/Cargo.toml
index 03008615077..45b9efd0cc5 100644
--- a/examples/browser-webrtc/Cargo.toml
+++ b/examples/browser-webrtc/Cargo.toml
@@ -18,7 +18,7 @@ crate-type = ["cdylib"]
 [dependencies]
 anyhow = "1.0.102"
 futures = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
 
diff --git a/examples/stream/Cargo.toml b/examples/stream/Cargo.toml
index 3e4147231c8..a8e19b9e315 100644
--- a/examples/stream/Cargo.toml
+++ b/examples/stream/Cargo.toml
@@ -13,7 +13,7 @@ anyhow = "1"
 futures = { workspace = true }
 libp2p = { path = "../../libp2p", features = [ "tokio", "quic"] }
 libp2p-stream = { path = "../../protocols/stream", version = "0.5.0-alpha" }
-rand = "0.8"
+rand = "0.10"
 tokio = { workspace = true, features = ["full"] }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
diff --git a/identity/Cargo.toml b/identity/Cargo.toml
index 51f39fba584..72838b1c295 100644
--- a/identity/Cargo.toml
+++ b/identity/Cargo.toml
@@ -21,7 +21,7 @@ tracing = { workspace = true }
 multihash = { version = "0.19.1", optional = true }
 p256 = { version = "0.13", default-features = false, features = ["ecdsa", "std", "pem"], optional = true }
 quick-protobuf = { version = "0.8.1", optional = true }
-rand = { version = "0.8", optional = true }
+rand = { version = "0.10", optional = true }
 sec1 = { version = "0.7", default-features = false, optional = true }
 serde = { version = "1", optional = true, features = ["derive"] }
 sha2 = { version = "0.10.8", optional = true }
diff --git a/interop-tests/Cargo.toml b/interop-tests/Cargo.toml
index cd230ec521f..be3c903ca22 100644
--- a/interop-tests/Cargo.toml
+++ b/interop-tests/Cargo.toml
@@ -14,7 +14,7 @@ crate-type = ["cdylib", "rlib"]
 [dependencies]
 anyhow = "1"
 futures = { workspace = true }
-rand = "0.8.5"
+rand = "0.10.0"
 serde = { version = "1", features = ["derive"] }
 tracing = { workspace = true }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
diff --git a/misc/connection-limits/Cargo.toml b/misc/connection-limits/Cargo.toml
index 7048a6f1ee6..f54d01550af 100644
--- a/misc/connection-limits/Cargo.toml
+++ b/misc/connection-limits/Cargo.toml
@@ -21,7 +21,7 @@ libp2p-ping = { workspace = true }
 libp2p-swarm-derive = { path = "../../swarm-derive" }
 libp2p-swarm-test = { path = "../../swarm-test" }
 quickcheck = { workspace = true }
-rand = "0.8.5"
+rand = "0.10.0"
 
 [lints]
 workspace = true
diff --git a/misc/webrtc-utils/Cargo.toml b/misc/webrtc-utils/Cargo.toml
index 4da6cb503f7..307fe6bb4e0 100644
--- a/misc/webrtc-utils/Cargo.toml
+++ b/misc/webrtc-utils/Cargo.toml
@@ -20,7 +20,7 @@ libp2p-identity = { workspace = true }
 libp2p-noise = { workspace = true }
 quick-protobuf = "0.8"
 quick-protobuf-codec = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 serde = { version = "1.0", features = ["derive"] }
 sha2 = "0.10.8"
 tinytemplate = "1.2"
diff --git a/muxers/mplex/Cargo.toml b/muxers/mplex/Cargo.toml
index 4c919b74947..dbb03f90941 100644
--- a/muxers/mplex/Cargo.toml
+++ b/muxers/mplex/Cargo.toml
@@ -18,7 +18,7 @@ libp2p-core = { workspace = true }
 libp2p-identity = { workspace = true }
 nohash-hasher = "0.2"
 parking_lot = "0.12"
-rand = "0.8"
+rand = "0.10"
 smallvec = "1.15.1"
 tracing = { workspace = true }
 unsigned-varint = { workspace = true, features = ["asynchronous_codec"] }
diff --git a/protocols/autonat/Cargo.toml b/protocols/autonat/Cargo.toml
index a5691d227f3..84d5416336a 100644
--- a/protocols/autonat/Cargo.toml
+++ b/protocols/autonat/Cargo.toml
@@ -29,7 +29,7 @@ libp2p-swarm = { workspace = true }
 quick-protobuf = "0.8"
 tracing = { workspace = true }
 quick-protobuf-codec = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 rand_core = { version = "0.6", optional = true }
 thiserror = { workspace = true, optional = true }
 
diff --git a/protocols/floodsub/Cargo.toml b/protocols/floodsub/Cargo.toml
index 4746cc90bf2..7d3208b0717 100644
--- a/protocols/floodsub/Cargo.toml
+++ b/protocols/floodsub/Cargo.toml
@@ -21,7 +21,7 @@ libp2p-swarm = { workspace = true }
 libp2p-identity = { workspace = true }
 quick-protobuf = "0.8"
 quick-protobuf-codec = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 smallvec = "1.15.1"
 thiserror = { workspace = true }
 tracing = { workspace = true }
diff --git a/protocols/gossipsub/Cargo.toml b/protocols/gossipsub/Cargo.toml
index 74d3266334e..bf1cf234f59 100644
--- a/protocols/gossipsub/Cargo.toml
+++ b/protocols/gossipsub/Cargo.toml
@@ -34,7 +34,7 @@ libp2p-identity = { workspace = true, features = ["rand"] }
 libp2p-swarm = { workspace = true }
 quick-protobuf = "0.8"
 quick-protobuf-codec = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 regex = "1.12.3"
 serde = { version = "1", optional = true, features = ["derive"] }
 sha2 = "0.10.8"
diff --git a/protocols/kad/Cargo.toml b/protocols/kad/Cargo.toml
index a5eb4ac2f1a..1aed882a681 100644
--- a/protocols/kad/Cargo.toml
+++ b/protocols/kad/Cargo.toml
@@ -22,7 +22,7 @@ futures-bounded = { workspace = true }
 quick-protobuf = "0.8"
 quick-protobuf-codec = { workspace = true }
 libp2p-identity = { workspace = true, features = ["rand"] }
-rand = "0.8"
+rand = "0.10"
 sha2 = "0.10.8"
 smallvec = "1.15.1"
 uint = "0.10"
diff --git a/protocols/mdns/Cargo.toml b/protocols/mdns/Cargo.toml
index 68fad307d93..86934644769 100644
--- a/protocols/mdns/Cargo.toml
+++ b/protocols/mdns/Cargo.toml
@@ -16,7 +16,7 @@ if-watch = { workspace = true }
 libp2p-core = { workspace = true }
 libp2p-swarm = { workspace = true }
 libp2p-identity = { workspace = true }
-rand = "0.8.3"
+rand = "0.10.0"
 smallvec = "1.15.1"
 socket2 = { version = "0.6.3", features = ["all"] }
 tokio = { workspace = true, default-features = false, features = ["net", "time"], optional = true }
diff --git a/protocols/ping/Cargo.toml b/protocols/ping/Cargo.toml
index 8b00cd9287f..5e7acb2d995 100644
--- a/protocols/ping/Cargo.toml
+++ b/protocols/ping/Cargo.toml
@@ -17,7 +17,7 @@ web-time = { workspace = true }
 libp2p-core = { workspace = true }
 libp2p-swarm = { workspace = true }
 libp2p-identity = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 tracing = { workspace = true }
 
 [dev-dependencies]
diff --git a/protocols/relay/Cargo.toml b/protocols/relay/Cargo.toml
index bba481db11f..0992c739b8c 100644
--- a/protocols/relay/Cargo.toml
+++ b/protocols/relay/Cargo.toml
@@ -23,7 +23,7 @@ libp2p-swarm = { workspace = true }
 libp2p-identity = { workspace = true }
 quick-protobuf = "0.8"
 quick-protobuf-codec = { workspace = true }
-rand = "0.8.4"
+rand = "0.10.0"
 static_assertions = "1"
 thiserror = { workspace = true }
 tracing = { workspace = true }
diff --git a/protocols/rendezvous/Cargo.toml b/protocols/rendezvous/Cargo.toml
index 86952d8c303..1c3158b3fc1 100644
--- a/protocols/rendezvous/Cargo.toml
+++ b/protocols/rendezvous/Cargo.toml
@@ -23,14 +23,14 @@ libp2p-identity = { workspace = true }
 libp2p-request-response = { workspace = true }
 quick-protobuf = "0.8"
 quick-protobuf-codec = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 thiserror = { workspace = true }
 tracing = { workspace = true }
 
 [dev-dependencies]
 libp2p-swarm = { workspace = true, features = ["macros", "tokio"] }
 libp2p-swarm-test = { path = "../../swarm-test" }
-rand = "0.8"
+rand = "0.10"
 tokio = { workspace = true, features = [ "rt-multi-thread", "time", "macros", "sync", "process", "fs", "net" ] }
 tracing-subscriber = { workspace = true, features = ["env-filter"] }
 
diff --git a/protocols/request-response/Cargo.toml b/protocols/request-response/Cargo.toml
index 8d7056a719c..7c7c617d087 100644
--- a/protocols/request-response/Cargo.toml
+++ b/protocols/request-response/Cargo.toml
@@ -16,7 +16,7 @@ futures = { workspace = true }
 libp2p-core = { workspace = true }
 libp2p-swarm = { workspace = true }
 libp2p-identity = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 serde = { version = "1.0", optional = true }
 serde_json = { version = "1.0.149", optional = true }
 smallvec = "1.15.1"
@@ -30,7 +30,7 @@ cbor = ["dep:serde", "dep:cbor4ii", "libp2p-swarm/macros"]
 [dev-dependencies]
 anyhow = "1.0.102"
 tokio = { workspace = true, features = ["macros", "rt-multi-thread", "time"] }
-rand = "0.8"
+rand = "0.10"
 libp2p-swarm-test = { path = "../../swarm-test" }
 futures_ringbuf = "0.4.0"
 serde = { version = "1.0", features = ["derive"] }
diff --git a/protocols/stream/Cargo.toml b/protocols/stream/Cargo.toml
index 73cf8ea85da..abbaefa7164 100644
--- a/protocols/stream/Cargo.toml
+++ b/protocols/stream/Cargo.toml
@@ -15,7 +15,7 @@ libp2p-core = { workspace = true }
 libp2p-identity = { workspace = true, features = ["peerid"] }
 libp2p-swarm = { workspace = true }
 tracing = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 
 [dev-dependencies]
 libp2p-swarm-test = { workspace = true }
diff --git a/swarm/Cargo.toml b/swarm/Cargo.toml
index 19d70f01547..30050407004 100644
--- a/swarm/Cargo.toml
+++ b/swarm/Cargo.toml
@@ -22,7 +22,7 @@ libp2p-core = { workspace = true }
 libp2p-identity = { workspace = true }
 libp2p-swarm-derive = { workspace = true, optional = true }
 multistream-select = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 smallvec = "1.15.1"
 tracing = { workspace = true }
 wasm-bindgen-futures = { version = "0.4.42", optional = true }
diff --git a/transports/noise/Cargo.toml b/transports/noise/Cargo.toml
index dca4818f8db..5f614336895 100644
--- a/transports/noise/Cargo.toml
+++ b/transports/noise/Cargo.toml
@@ -17,7 +17,7 @@ libp2p-identity = { workspace = true, features = ["ed25519"] }
 multiaddr = { workspace = true }
 multihash = { workspace = true }
 quick-protobuf = "0.8"
-rand = "0.8.3"
+rand = "0.10.0"
 static_assertions = "1"
 thiserror = { workspace = true }
 tracing = { workspace = true }
diff --git a/transports/pnet/Cargo.toml b/transports/pnet/Cargo.toml
index e268fee56fd..35a9a80d3e9 100644
--- a/transports/pnet/Cargo.toml
+++ b/transports/pnet/Cargo.toml
@@ -15,7 +15,7 @@ futures = { workspace = true }
 salsa20 = "0.10"
 sha3 = "0.10"
 tracing = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 pin-project = "1.1.11"
 
 [dev-dependencies]
diff --git a/transports/quic/Cargo.toml b/transports/quic/Cargo.toml
index 9e98ec13667..cef6eaa3f0a 100644
--- a/transports/quic/Cargo.toml
+++ b/transports/quic/Cargo.toml
@@ -16,7 +16,7 @@ libp2p-core = { workspace = true }
 libp2p-tls = { workspace = true }
 libp2p-identity = { workspace = true }
 quinn = { version = "0.11.9", default-features = false, features = ["rustls", "futures-io"] }
-rand = "0.8.5"
+rand = "0.10.0"
 rustls = { version = "0.23.28", default-features = false }
 thiserror = { workspace = true }
 tokio = { workspace = true, default-features = false, features = ["net", "rt", "time"], optional = true }
diff --git a/transports/webrtc/Cargo.toml b/transports/webrtc/Cargo.toml
index 7a963d81cc9..64eef17168a 100644
--- a/transports/webrtc/Cargo.toml
+++ b/transports/webrtc/Cargo.toml
@@ -21,7 +21,7 @@ libp2p-noise = { workspace = true }
 libp2p-identity = { workspace = true }
 libp2p-webrtc-utils = { workspace = true }
 multihash = { workspace = true }
-rand = "0.8"
+rand = "0.10"
 rcgen = { workspace = true }
 stun = "0.7"
 thiserror = { workspace = true }