Coinspect Discloses 'Ill Bloom' Flaw That Has Drained at Least $5 Million From Weak-Randomness Crypto Wallets
Coinspect says a weak-randomness flaw in recovery-phrase generation, dubbed Ill Bloom, has let attackers drain at least $5 million from crypto wallets since May 27.
Editor's Note ·
- Correction:
- The article states a further $2 million was moved out of exposed wallets "around June 30." The cited Cointelegraph article instead reports that this $2 million was moved "on Sunday," which corresponds to July 5, 2026 given the article's July 6, 2026 (Monday) publish date and its own references to Coinspect's disclosure occurring on Sunday and SlowMist posting about it on Monday. The $5 million aggregate total and the May 27 exploitation start date are correctly sourced; only the date of the second $2 million movement is wrong.
Overview
Blockchain security firm Coinspect has disclosed a cryptocurrency wallet flaw it calls Ill Bloom, warning that attackers have already drained at least $5 million from exposed wallets since May 27, according to Cointelegraph. Coinspect describes Ill Bloom as “the name we use for this actively exploited wallet-generation vulnerability,” according to the firm’s own disclosure site, illbloom.org.
What We Know
The vulnerability traces to how certain software wallets generate the recovery phrase that controls access to a user’s funds. Coinspect states that “the issue is related to weak randomness (insecure PRNG) used during recovery phrase generation, resulting in recovery phrases with less cryptographic strength than expected,” according to illbloom.org. A pseudorandom number generator (PRNG) that produces predictable output shrinks the pool of possible recovery phrases enough that an attacker can guess or reconstruct one and take control of the wallet it protects.
According to Cointelegraph, the affected wallets were generated as early as 2018, and active exploitation began on May 27, 2026. In a single coordinated sweep that day, attackers drained $3.1 million from 431 wallets out of 2,114 identified as vulnerable, Cointelegraph reported. A further $2 million moved out of exposed wallets around June 30, bringing the confirmed total to at least $5 million since May 27, according to the outlet.
Coinspect’s own disclosure lists a broad set of affected networks: “Affected users hold portfolios spread across Bitcoin, Ethereum, Tron, Solana, BNB Chain, Polygon, Monad, Arbitrum, Gnosis, Optimism, Base, Avax, Linea, and HyperEVM,” according to illbloom.org. Cointelegraph’s reporting on the disclosure similarly named Bitcoin, Ethereum, Polygon, Rootstock, Tron, and Solana among the networks at risk.
Not every wallet is exposed. Coinspect said “current evidence tells us that users that generated their seed with a hardware wallet are not affected,” according to both illbloom.org and Cointelegraph. Cointelegraph also quoted Coinspect saying “the strongest candidates are users who generated their seed in less widely used mobile software wallets,” pointing to niche mobile wallet software as the primary source of the weak randomness rather than hardware devices or mainstream software wallets.
The vulnerability’s name has an unusual origin. Coinspect explains that “Ill Bloom comes from a wordplay on the first recovery phrase produced by the vulnerable PRNG, which begins with ‘illness blossom,’” according to illbloom.org.
For remediation, Coinspect’s guidance is direct: “the safest remediation is to create a new wallet with a new recovery phrase and migrate your funds to addresses from that new wallet,” according to illbloom.org. Coinspect has also released a wallet-checking tool that lets users verify whether their public addresses are among those flagged as exposed, according to Cointelegraph.
What We Don’t Know
Coinspect has not disclosed which specific wallet software products generated the weak recovery phrases, limiting public detail to reduce the risk of further exploitation. Neither source specifies exactly how many wallets in total are believed to be vulnerable beyond the 2,114 identified in the May 27 sweep, nor whether additional coordinated drains have occurred between June 30 and the disclosure date. It also remains unclear how many affected users have migrated funds to new wallets since the warning was issued.
Analysis
The Ill Bloom disclosure underscores a persistent weak point in self-custody cryptocurrency security: the randomness underlying key generation is invisible to end users, who have no way to independently verify that a wallet app implemented its PRNG correctly. Coinspect’s finding that hardware wallets and most current software wallets are unaffected suggests the flaw is concentrated in a specific subset of implementations rather than a protocol-level weakness, but for the users who were exposed, the practical effect is the same as a stolen password: anyone who can reconstruct the recovery phrase gains full control of the funds it protects, with no multi-factor step to stop them.