Research

• Chinese-Mnemonic Wallet Drains Analysis A coordinated cross-chain sweep between 2026-07-20 and 2026-07-21 drained funds associated with seeds from the Chinese mnemonic subset.
• Technical Disclosure: The CryptoJS Randomness Vulnerability How a weak CryptoJS pseudorandom number generator reduced BIP39 recovery phrase entropy and reached wallet software.
• Identifying the Wallets Behind Vulnerable Recovery Phrases How we identified wallet applications associated with the weak entropy-generation mechanism behind the Ill Bloom vulnerability.
• Second Wave of Wallet Drains Analysis On-chain forensics of a second coordinated drain (May–July 2026) across Bitcoin, Ethereum, Polygon, Rootstock and Tron wallets derived from weak recovery phrases.
• Dataset Construction Methodology Methodology used to identify affected recovery phrases and construct the Ill Bloom Exposed Address Set 1 of June 2026.
• Wallet Drain of May 2026 Analysis On-chain forensics of the May 2026 coordinated drain across Bitcoin, Ethereum, Polygon, Rootstock and Tron wallets derived from weak recovery phrases.