ll Bloom: recovering wallet seeds generated by CryptoJS’s historical MWC PRNG

Coinspect recently disclosed **Ill Bloom**, a vulnerability affecting recovery phrases generated using the historical `CryptoJS.lib.WordArray.random()` implementation.

The affected CryptoJS 3.x code used a Multiply-With-Carry construction seeded with values derived from `Math.random()`

The technical disclosure, including the PRNG reconstruction and affected-version analysis, is here:

[https://illbloom.org/](https://illbloom.org/)