diff --git a/Cargo.lock b/Cargo.lock
index c8be3e154ddd8..cd2371dba1d4d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -5174,7 +5174,7 @@ dependencies = [
  "serde",
  "thiserror 1.0.63",
  "tracing",
- "twox-hash",
+ "twox-hash 1.6.3",
  "zstd 0.13.0",
 ]
 
@@ -7232,7 +7232,7 @@ version = "0.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3ea9b256699eda7b0387ffbc776dd625e28bde3918446381781245b7a50349d8"
 dependencies = [
- "twox-hash",
+ "twox-hash 1.6.3",
 ]
 
 [[package]]
@@ -7788,7 +7788,7 @@ dependencies = [
  "tokio",
  "tokio-native-tls",
  "tokio-util",
- "twox-hash",
+ "twox-hash 1.6.3",
  "url",
 ]
 
@@ -8749,7 +8749,7 @@ dependencies = [
  "snap",
  "thrift",
  "tokio",
- "twox-hash",
+ "twox-hash 1.6.3",
  "zstd 0.13.0",
  "zstd-sys",
 ]
@@ -8784,7 +8784,7 @@ dependencies = [
  "snap",
  "thrift",
  "tokio",
- "twox-hash",
+ "twox-hash 1.6.3",
  "zstd 0.13.0",
  "zstd-sys",
 ]
@@ -10464,7 +10464,7 @@ dependencies = [
  "serde",
  "serde_json",
  "thiserror 1.0.63",
- "twox-hash",
+ "twox-hash 2.0.1",
 ]
 
 [[package]]
@@ -10521,7 +10521,7 @@ dependencies = [
  "tokio-stream 0.1.15",
  "tokio-util",
  "tracing",
- "twox-hash",
+ "twox-hash 2.0.1",
  "uuid",
  "workspace-hack",
 ]
@@ -10732,7 +10732,7 @@ dependencies = [
  "tracing-futures",
  "tracing-opentelemetry",
  "tracing-subscriber",
- "twox-hash",
+ "twox-hash 2.0.1",
  "url",
  "uuid",
  "workspace-hack",
@@ -15156,6 +15156,15 @@ dependencies = [
  "static_assertions",
 ]
 
+[[package]]
+name = "twox-hash"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6db6856664807f43c17fbaf2718e2381ac1476a449aa104f5f64622defa1245"
+dependencies = [
+ "rand",
+]
+
 [[package]]
 name = "typed-builder"
 version = "0.10.0"
diff --git a/src/batch/Cargo.toml b/src/batch/Cargo.toml
index ee6f757e17376..a8934e20070fa 100644
--- a/src/batch/Cargo.toml
+++ b/src/batch/Cargo.toml
@@ -68,7 +68,7 @@ tokio-stream = { workspace = true }
 tokio-util = { workspace = true }
 tonic = { workspace = true }
 tracing = "0.1"
-twox-hash = "1"
+twox-hash = "2"
 uuid = { version = "1", features = ["v4"] }
 
 [target.'cfg(not(madsim))'.dependencies]
diff --git a/src/common/Cargo.toml b/src/common/Cargo.toml
index 4b002bd8084c6..568987ca3946e 100644
--- a/src/common/Cargo.toml
+++ b/src/common/Cargo.toml
@@ -121,7 +121,7 @@ tracing = "0.1"
 tracing-futures = { version = "0.2", features = ["futures-03"] }
 tracing-opentelemetry = { workspace = true }
 tracing-subscriber = "0.3.17"
-twox-hash = "1"
+twox-hash = "2"
 url = "2"
 uuid = { version = "1", features = ["v4"] }
 
diff --git a/src/storage/backup/Cargo.toml b/src/storage/backup/Cargo.toml
index 3fd7d7ecde5ce..23a2c99567c48 100644
--- a/src/storage/backup/Cargo.toml
+++ b/src/storage/backup/Cargo.toml
@@ -29,7 +29,7 @@ risingwave_pb = { workspace = true }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 thiserror = "1"
-twox-hash = "1"
+twox-hash = "2"
 
 [dev-dependencies]
 risingwave_hummock_sdk = { workspace = true }