Ill Bloom Drains $5 Million from Crypto Wallets Due to Weak Key-Generation Issues
A vulnerability known as Ill Bloom has already drained over $5 million from cryptocurrency wallets and thousands more addresses remain at risk. The problem is not a wallet hack, but rather a bad key-generation issue that affects some wallets from their inception.
Coinspect's analysis shows that on May 27, 2026, 431 crypto accounts across Bitcoin, Ethereum, Tron, Rootstock, and Polygon were drained in a coordinated sweep. The first loss is estimated to be around $3.14 million, with Bitcoin carrying $2.57 million of it.
The total measured loss now stands at about $5.69 million after another 522 seeds were emptied between May 30 and July 13 for approximately $2.55 million. The biggest piece was on Tron, where one account lost roughly 2.18 million USDT on July 4.
Ill Bloom is a result of weak randomness during recovery phrase generation. If the software that created your 12-word phrase used a predictable pseudorandom number generator, an attacker can search the reduced space of possible phrases and rebuild the wallet without touching your phone.