A cosmetic choice with a cryptographic cost
Vanity addresses — addresses beginning with a chosen string of characters — are generated by trying keys repeatedly until one produces the desired prefix. Profanity, a popular generator, used a seeding approach that dramatically narrowed the search space for anyone attacking it. Once that was understood, recovering the private key for an address produced by the tool became computationally feasible.
The motivation for using such an address is entirely presentational: a recognisable prefix looks legitimate and is easier for counterparties to eyeball. That aesthetic preference determined the security of the funds behind it.
Disclosure is not remediation
The most useful detail is the sequence. The weakness was public and the tool deprecated roughly five days before Wintermute’s address was drained. The information was available. What was missing was an inventory linking production addresses to how they had been generated, so the disclosure could be turned into action.
Any organisation holding assets on-chain inherits this problem. When a tool in your history is found to be broken, the ability to answer “which of our addresses came from that tool” quickly is the difference between a scramble and a controlled rotation.
For individual holders
If an address you control was produced by a vanity generator rather than by a standard wallet’s key derivation, the generator and its seeding method are worth establishing. Addresses generated by mainstream wallets using standard derivation are not affected by this class of weakness.
Timeline
Append-only. Corrections are added as their own dated entry; earlier entries are never rewritten.
- The Profanity vanity-address key-generation weakness is publicly documented and the tool is deprecated. Public disclosure
- Wintermute's DeFi vault address is drained. CEO Evgeny Gaevoy publicly confirms the incident and states the firm remains solvent. Wintermute
What to check
The weakness was publicly documented before the incident and applies to any address generated with the affected tool. If an address in your control was generated by a vanity-address generator, the generator's seeding method is the thing to establish.
Conisec does not host or link recovery, revocation or "checker" tools. After a public incident, attackers routinely seed exactly those links using the names of publications covering the story. Use the affected project's own official channel, linked above, and nothing else.
Sources
- Wintermute (Evgeny Gaevoy), Public statement on the incident (20 Sep 2022)
Not advice. This is a summary of published facts, not legal, tax or security advice. Verify against the primary sources linked above.
Last verified by Conisec Staff.
