Ill Bloom: Weak PRNG Drained $5.1M From Crypto Wallets

Confirmed drain: $5.1M. Confirmed root cause: weak randomness in wallet seed-phrase generation. Attribution: none published. Patch: none possible for keys already generated with the bad code — funds have to move.

Coinspect disclosed the flaw on July 10 and named it Ill Bloom. They identified five vulnerable wallet implementations — a mix of mobile apps and browser extensions, some going back to 2018 — and are keeping the names off the public writeup. Hardware wallets and the mainstream software wallets are not on the list. Confidence on scope: high, per Coinspect’s numbers. Confidence on the full affected-wallet list: low outside Coinspect, deliberately.

The class of bug is old and well-understood: when a wallet uses a weak random-number generator to build the recovery phrase, the space of possible phrases collapses from astronomical to searchable. Anyone who works out which generator was used can regenerate the keys and empty the wallet without ever touching the victim’s device. Coinspect has not published the reduction factor. Treat that as intentional — the primary defense right now is that attackers don’t already know which wallets are on the list.

Timeline

• May 27, 2026 — First confirmed sweep. 431 wallets emptied in a coordinated pull. ~$3.1M taken across chains; Bitcoin took the largest share at roughly $2.57M, with a single address losing over $1.1M. Confidence: confirmed by on-chain evidence.
• June 10, 2026 — Second event. A single exposed wallet lost $2.1M in USDT. Coinspect attributes this to the same class of flaw. Confidence: confirmed on the loss, assessed on same-actor attribution.
• July 10, 2026 — Public disclosure by Coinspect. Wallet vendors named privately, not publicly. Users pointed at illbloom.org to check addresses.
• Ongoing — No CVE assigned as of this writing. Confidence: verified against MITRE search at time of publication.

What holders should do

Coinspect’s guidance is short and worth repeating: check any address you hold at illbloom.org. If your address is flagged — or if you generated the seed phrase in a lesser-known mobile or browser-extension wallet dating back to 2018 or 2019 — the correct assumption is that the phrase is unsafe, forever. Create a new wallet with a fresh seed phrase from a wallet whose entropy source you trust. Move funds. Hardware wallets are the recommended destination.

For everyone else: this is a good moment to note which wallet software actually generated your keys, and whether the vendor is still shipping updates. Ill Bloom is the disclosure that surfaced this particular pool. It is not the last time a wallet built between 2017 and 2020 will turn out to have been generating recoverable phrases the whole time.

Sources

• The Hacker News — “Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million” — July 10, 2026.
• illbloom.org — Coinspect’s address checker.