NewsSOS
Security firm Coinspect has identified a vulnerability it calls "Ill Bloom" that puts thousands of crypto wallets across multiple blockchains at risk. The flaw stems from weak recovery phrase generation, the firm said.
What the Vulnerability Does Recovery phrases — typically a sequence of words generated when a wallet is created — function as a master key to a user's funds.
If the process that generates those phrases relies on insufficient randomness or a flawed entropy source, an attacker can narrow the search space and reconstruct a victim's phrase without their knowledge.
Coinspect's "Ill Bloom" finding centers on exactly this weakness.
Keep reading