Crypto glossary
Vanity address
A vanity address is a crypto address with a chosen prefix or pattern, found by generating keys at random until one matches, at real security risk.
Addresses are derived from keys and look random, but users can brute-force them: generate keypairs repeatedly until the resulting address starts with a desired string, such as 1Love on Bitcoin or 0x0000 on Ethereum. Every extra character multiplies the work, so short prefixes take seconds while long ones can take enormous computing power. Some projects use them for branding, and leading zeros can slightly reduce gas costs in certain Ethereum operations.
The danger lies in how keys are generated. In 2022 it emerged that Profanity, a popular Ethereum vanity generator, seeded its search with only 32 bits of randomness, allowing attackers to recover private keys from public addresses. Soon after, the market maker Wintermute lost about $160 million from a vanity address created with the tool. Many other wallets were drained.
Safe vanity generation requires strong entropy and, ideally, split-key techniques where an outside service never sees the full private key. Vanity patterns also fuel scams: in address poisoning, attackers generate addresses matching the first and last characters of a victim's contacts to trick them into copying the wrong one.
Example
A DAO generates a treasury address starting with 0xdA0 for recognition; it uses a modern, audited generator with strong randomness after learning about the Profanity exploit.