Ill Bloom Wallet Flaw Drains $5M From Exposed Bitcoin Addresses

Crypto News

A newly disclosed vulnerability nicknamed “Ill Bloom” has left thousands of self-custody wallets exposed to theft, with roughly $5 million already moved from affected accounts since May 27. Security firm Coinspect published its first findings on Sunday, warning that the flaw stems from weak randomness during recovery-phrase generation and spans wallets built on Bitcoin, Ethereum, Polygon, Rootstock, Tron and Solana. The firm cautioned that any crypto wallet user who saw funds move without authorization should treat the bug as a likely cause, and it released a checking tool so holders can test whether their addresses fall within the exposed set.

The root problem is a flawed random-number generator. When a wallet creates a seed phrase, it must draw on strong entropy so the resulting private keys cannot be predicted. Coinspect’s reading of the on-chain evidence indicates that certain software wallets used an insecure pseudorandom generator, narrowing the range of possible keys and making them guessable by an attacker who understands the pattern. That mechanism, not a phishing lure or a smart-contract exploit, is why balances have quietly drained. The firm said it is deliberately withholding technical details of the active exploit at this stage to avoid arming further attacks against still-vulnerable holders.

On-chain data tied to one reviewed address set shows how concentrated the damage has been. In a single sweep on May 27, attackers drained about $3.1 million from 431 wallets out of 2,114 flagged as vulnerable. A second wave on Sunday moved a further $2 million from exposed accounts, lifting the confirmed total to roughly $5 million. Coinspect stressed that the real figure is likely higher, because its analysis may not yet cover every chain or every address generated with the same weak pattern. The distribution across networks suggests a shared code fault rather than an isolated incident on one blockchain.

Timing is a central concern. The firm said vulnerable wallets trace back as far as 2018, yet fresh exposed addresses were still being generated in recent weeks. That long tail implies the defect does not sit inside a single application that could simply be patched and forgotten; instead, the weak generation pattern appears to have propagated through more than one codebase over several years. For users of major networks and altcoin chains alike, the practical takeaway is that a wallet created years ago on a niche app could carry the same latent weakness as one made this month.

Coinspect offered some reassurance on scope. Current evidence indicates that users who generated their seed with a hardware wallet are not affected, and most widely used software wallets also appear safe. The strongest candidates for exposure are holders who created their recovery phrases inside lesser-known mobile software wallets. That distinction matters for risk triage: hardware-based cold storage and mainstream apps sit outside the primary blast radius, while obscure mobile clients — often used to hold speculative tokens or DeFi positions — warrant an immediate check against the published tool and, where possible, a migration to freshly generated keys.

Other researchers have moved to corroborate the alert. Security outfit SlowMist confirmed it is closely monitoring the Ill Bloom weak-randomness warning and urged users to inspect older wallet addresses that may predate current security standards. The parallel tracking underscores that this is being treated as an ecosystem-wide entropy failure rather than a one-off theft. Because the flaw undermines the cryptographic assumption at the heart of self-custody — that a seed phrase is effectively impossible to guess — the industry response has centered on detection and migration rather than any single vendor fix.

Our reading is that Ill Bloom lands at a fragile moment for sentiment: COINOTAG’s aggregate market data puts the Fear & Greed Index at 24 out of 100, deep in Extreme Fear, with Bitcoin dominance at 69.3% and total crypto market capitalization near $1.82 trillion. A trust shock to self-custody — the foundational promise that a properly generated seed cannot be brute-forced — cuts deeper than a routine protocol hack, because it touches wallets across six chains simultaneously. The confirmed $5 million drained is modest in dollar terms, but the unresolved question is scope. Until Coinspect’s analysis extends across every affected network, holders on obscure mobile clients should assume exposure and verify, not wait.