Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets

A vulnerability known as Ill Bloom has been discovered in some cryptocurrency wallet software, specifically in how recovery phrases are generated. If the recovery phrase is created with weak randomness, an attacker can potentially guess it and gain control over the associated funds. Attackers have already exploited this flaw to drain approximately $3.1 million from cryptocurrency wallets. The security firm Coinspect has confirmed at least one coordinated attack occurred in May, taking advantage of the Ill Bloom vulnerability. The vulnerability allows attackers to work out the recovery phrase and steal the controlled money. Coinspect's disclosure highlights the active exploitation of this crypto wallet flaw.