Ill Bloom Wallet Flaw: $5M Stolen, Thousands at Risk

New "Ill Bloom" Vulnerability Exposes Thousands of Crypto Wallets

A security firm, Coinspect, has disclosed a newly identified wallet vulnerability dubbed Ill Bloom that compromises seed phrase generation in certain software wallets. The flaw increases the likelihood that attackers can guess a user's seed phrase and take control of crypto wallets across multiple blockchains, including Bitcoin, Ethereum, Solana, Tron, Polygon and Rootstock. Preliminary reports indicate at least $5 million in cryptocurrency has already been stolen from affected wallets.

How Ill Bloom Works and Which Wallets Are Affected

According to Coinspect, the issue stems from weak entropy during seed phrase creation in some mobile and lesser-known software wallets created since 2018. This weak seed generation reduces randomness, making seed phrases easier to brute force or predict. Hardware wallets and most major, reputable software wallets currently appear unaffected based on available evidence, though Coinspect has not yet published full technical details.

Confirmed Thefts and Attack Timeline

Coinspect reports multiple exploitation events. On May 27, attackers targeted 431 wallets out of 2,114 known vulnerable addresses, stealing roughly $3.1 million. A subsequent incident on a recent Sunday removed about $2 million more, bringing the total confirmed losses to at least $5 million. The firm has released a wallet-checker tool to help users determine exposure but is holding back full exploit specifics for now.

Practical Steps to Protect Your Crypto

For holders of Bitcoin, Ethereum, and other tokens, immediate steps are recommended: move funds from any suspect hot wallets to trusted hardware wallets or multisig cold storage; never store seed phrases digitally or in cloud backups; update wallet apps from official sources; and run the Coinspect checker if you used a less-known mobile wallet. Enabling multi-signature protection and using well-audited wallets improves resilience against future crypto theft.

While Ill Bloom has not had a direct, sustained impact on market prices, it underscores ongoing risks in blockchain security and the critical importance of strong seed phrase generation and prudent custody practices for crypto asset protection.