Thousands of crypto wallets at risk from ‘Ill Bloom’ vulnerability: Coinspect

Coinspect has identified a vulnerability dubbed 'Ill Bloom' that puts thousands of crypto wallets at risk across multiple blockchains. The security firm reports that attackers have already exploited the flaw, draining at least $5 million from compromised addresses. The vulnerability stems from weak recovery phrase generation, which allows attackers to predict or brute-force seed phrases. This affects wallets that rely on insecure random number generation or predictable entropy sources, a common issue in older or poorly designed wallet software. The exploit has been observed on Ethereum, Binance Smart Chain, and Polygon, with attackers systematically sweeping funds from wallets with weak entropy. For crypto traders, this highlights the importance of using hardware wallets or trusted software wallets with strong entropy. NowPrice's crypto page tracks affected assets and market reactions in real time.

This incident underscores a broader security challenge in the crypto ecosystem: self-custody, while empowering, requires rigorous security practices. Weak seed generation is not a new problem—similar vulnerabilities have been exploited in the past, such as the 2019 'Vault 7' leaks and the 2020 'WalletGenerator' incident. The 'Ill Bloom' vulnerability is particularly concerning because it affects wallets created over several years, potentially exposing millions of dollars in assets. The attack also highlights the importance of using wallets that follow industry standards like BIP39 for seed phrase generation, which ensures sufficient entropy. For investors, this serves as a reminder to audit their wallet security, especially if they used older or lesser-known wallet providers. The crypto market has seen increased volatility in response to the news, with some tokens experiencing temporary sell-offs as users rush to secure their funds.

Users should immediately transfer funds from wallets that may have used weak seed generation. Coinspect recommends checking wallet creation dates and using only reputable wallet providers. The incident underscores the ongoing risks in self-custody and the need for rigorous security practices in the crypto space. Moving forward, the industry may see increased adoption of multi-signature wallets and hardware wallets as users prioritize security. Additionally, this event could prompt wallet developers to implement better entropy checks and educate users on secure seed generation. For now, the focus remains on mitigating further losses and identifying all affected wallets. NowPrice will continue to monitor the situation and provide updates as more information becomes available.