v1 → v2
Scores
trust_score0 → 0
severity_base— → —
score_modifier-1.4 → -3.36
Sections
Vulnerability Overview
unchanged
Technical Root Cause
unchanged
Confirmed Financial Losses and On-Chain Impact
unchanged
Affected Chains and Scope
unchanged
Affected and Unaffected Wallet Types
unchanged
Mitigation and User Guidance
unchanged
Disclosing Party: Coinspect
unchanged
Ongoing Risk
unchanged
Timeline events
No timeline changes.
Accepted submissions
+ addedurlincriminating
{"url":"https://thehackernews.com/2026/07/attackers-exploit-ill-bloom.html","notes":"The Ill Bloom vulnerability, disclosed by Coinspect in July 2026, affects software wallets that used a weak pseudorandom number generator during seed phrase generation. Attackers exploited predictable seed phrases across Bitcoin, Ethereum, Polygon, Rootstock, Tron, and Solana — draining $5M+ from 2,114 identified vulnerable addresses since May 2026. A coordinated sweep on May 27 drained 431 accounts for $3.14M; another $2M moved July 5. Active exploitation continues. Hardware wallet users are unaffected.","title":"Ill Bloom Vulnerability (Weak PRNG Wallet Drain)","all_sources":["https://thehackernews.com/2026/07/attackers-exploit-ill-bloom.html","https://coingeek.com/ill-bloom-flaw-puts-2114-digital-walls-at-risk-report/","https://beincrypto.com/ill-bloom-vulnerability-crypto-wallets/"]}Each version is bound to the decision event that created it. Verify the chain anchor for either via the audit log.
v1 hash: 9dT9FUGQGrpn46zZQehM7hErYWcrwXAV7fDGCGkpa6Kk
v2 hash: GaHKqzZkh9f4C43gk2yucHpCcp89WnKAvwvkA6T19g6E