Threatens thousands of wallets across multiple blockchains due to weak recovery phrase generation. Traders and users should stay vigilant.
A significant security vulnerability, dubbed ‘Ill Bloom,’ has been identified by Coinspect, putting thousands of crypto wallets at risk from potential theft. This issue stems from the use of weaker-than-intended recovery phrases in certain software wallets across multiple blockchain networks including Bitcoin (BTC), Ethereum (ETH), Polygon, Rootstock, Tron, and Solana.
The vulnerability is linked to weak randomness generated by an insecure pseudorandom number generator during the creation of wallet recovery phrases. Coinspect has disclosed that at least $5 million in cryptocurrency has been drained from exposed wallets since May 27th, with many more potentially affected given the widespread nature of the issue and its long-term impact.
According to Coinspect’s analysis, this problem predominantly affects lesser-known mobile software wallets generated as early as 2018. While hardware wallets are not impacted due to their secure seed generation methods, users who rely on less popular software solutions remain at risk. The security firm has released a wallet-checking tool for affected users to determine if their addresses could be compromised.
The market reaction to this news is mixed but indicative of ongoing concerns over security in the crypto space. Wallet providers and exchanges are likely to face increased scrutiny, while trading volumes may see short-term fluctuations as investors reassess risks associated with holding funds on software wallets. This incident highlights the importance of using hardware wallets for long-term storage.
This vulnerability underscores broader issues within the industry regarding seed phrase generation and wallet security practices. Similar past incidents include Trust Wallet’s 2023 entropy generation flaw, which limited possible mnemonic combinations to about four billion, making them susceptible to brute-force attacks. The Ill Bloom issue poses a more significant risk due to its longer duration of exposure.
Traders should remain vigilant as this vulnerability could lead to further exploits and increased scrutiny on wallet security practices. Given the widespread use of software wallets among both retail and institutional traders, any potential changes in user behavior or regulatory responses are key areas for ongoing monitoring.
Source: Cointelegraph. Summarized and rewritten by the Vexoda Newsroom. This is market news, not financial advice.