Coinspect Discloses ‘Ill Bloom’ Flaw, Putting Thousands of Crypto Wallets at Risk

The “Ill Bloom” vulnerability disclosed by Coinspect stems from insufficient randomness when some software wallets generate seed phrases, potentially allowing attackers to derive private keys and transfer assets. Because seed phrases are central to wallet control, the threat spans major blockchains including Bitcoin, Ethereum and Solana, affecting thousands of wallets.

Coinspect said attackers have exploited the “Ill Bloom” vulnerability to steal at least $5 million in crypto assets since late May. Thousands of associated wallets remain at risk. Users whose seed phrases were created with affected software need to move their assets to new wallets generated using a trusted source of randomness.