Ill Bloom

Scope: this dataset covers recovery phrases generated by software wallets affected by the Ill Bloom vulnerability.

The dataset contains derived addresses associated with approximately 2,805 recovery phrases, covering Bitcoin, Ethereum/EVM, Tron, Rootstock, Cosmos, Solana, and Nano.

Direct derivation:

  • P2WPKH — m/84'/0'/{0,1,2}'/0/0 — BTC
  • P2PKH — m/44'/0'/{0,1,2}'/0/0 — BTC
  • P2SH-P2WPKH — m/49'/0'/{0,1,2}'/0/0 — BTC
  • ETH / EVM — m/44'/60'/0'/0/{0,1,2}
  • ETH (Ledger-style) — m/44'/60'/{1,2}'/0/0
  • Tron — m/44'/195'/0'/0/0
  • Rootstock — m/44'/137'/0'/0/0
  • Cosmos — m/44'/118'/0'/0/0
  • Solana (Phantom) — m/44'/501'/0'/0'
  • Solana (Solflare) — m/44'/501'/0'
  • Nano — m/44'/165'/0'

Dataset construction methodology