About unlukey

Unlukey is a public checker for wallet addresses associated with known weak seed-generation vulnerabilities.

Coverage

  • Coldcard

    A weak-randomness vulnerability in Coldcard firmware caused recovery phrases to be generated using a software PRNG instead of the hardware RNG, reducing their effective entropy and allowing attackers to discover vulnerable recovery phrases and drain funds.

    View dataset scope
  • Ill Bloom

    A weak-randomness vulnerability in CryptoJS caused affected wallet applications to generate BIP39 recovery phrases with significantly reduced entropy, allowing attackers to discover vulnerable recovery phrases and drain funds.

    View dataset scope