Bitcoin Forum

Here is the contents of my wallet.aes.json file from Blockchain that was recently hacked. Please crack it for me and take my 16 cents. Im using this is to learn from my mistakes.

I'm hoping it is encrypted with a 13 or 14 character pasword (I had 2 at blockchain) or i did something horribly wrong when setting up my blockchain account.

wallet.aes.json

13-14 chars isn't bruteforceable.  You probably had some malware.

not worth it for just 16 cents

Yeah, it's very infeasible to crack 13-14 characters. You would have to be extremely lucky. Like SgtSpike said, you probably had some kind of malware on your computer, such as a keylogger.

This is most likely the case, did you download any altcoin wallets or mining tools on that machine recently? Does your email have 2 factor authentication?

If I was you I would take this opportunity to avoid using online wallet services like Blockchain.info altogether. I'm not saying Blockchain.info is susceptible to attacks more than any other methods or will be attacked in the future, but most every online wallet I have used was hacked at one point and people lost varying amount of coins. Look into offline Cold Storage, the most recommended offline wallet is Armory.

Blockchain.info doesn't hold any unencrypted data and it doesn't know your password. There are two ways a hacker can gain access to your blockchain.info wallet:

• Run software on your machine that reads your wallet after it has been downloaded and decrypted by your browser.
• Obtain your password and id from you.

 The latter case is by far the most common scenario.

I guess i am just wondering if someone would try to import it into one of the bitcoin clients to see if it is indeed password protected or not.



Yes, alot, but i had not logged into blockchain from January 12th until it was hacked on July 7th. I was too Paranoid of keyloggers/malware. My email does not have 2 factor authentication. The thief could have easily got my wallet file but then how could he have cracked it?

I made 4 cold wallets to keep it in. Now i am paranoid because although i disconnected the ethernet cable and saved the BIP38 encrypted paper wallet (PDF) directly to a usb drive, I had to type in the password which may have been picked up by malware. I think i am officially done storing my bitcoin on any computer, as there are too many points of failure. You need to have a dedicated laptop/printer that never touches the internet to store your money safely by printing out paper wallets and keeping them in a safe. Maybe a Piper bitcoin wallet printer?

Here is my public key.
https://blockchain.info/address/1K2sV195TPP3mUCeHxZxizWUFZFRAvBsHn (https://blockchain.info/address/1K2sV195TPP3mUCeHxZxizWUFZFRAvBsHn)

Another potential way would be if the OP had a plaintext version of his identifier and password somewhere on the internet (maybe a public dropbox file, or potentially in his email). If this was the case then an attacker could simply log into blockchain.info and create a TX that sends the OP's money to his own address.  

I did have a paper wallet in a PDF format in the downloads folder of my phone. I didn't know i had it at all. Makes you wonder why Blockchain.info would let you download a paperwallet showing the private key without BIP38 encryption. It was named bitcoibackup.pdf (typo) I never let anyone look at my phone and have a strong picture-password so im not sure what could have happened. Maybe something to do with when it syncs the media on my computer? I did a search for the file and can't find it anywhere.

All that stress for just 16 cents,its not worth it.

16 cents? You gotta be kidding
I would assume that most of us value our time more than that

$0.16 is not worth
If you say 16 BTC this will worthy  ;D

And i think you need yo set blockchain.info very carefully

Cracking a wallet is not something you do in five minutes. It can take days, perhaps weeks. Definitely not worth if reward is 16 cent   ;)

See below!!!

Your joking right? Why would someone even bother to hack it just a waste of electricity.

14 characters will take more than 700 years to bruteforce. Even with supercomputer, expect some years to crack..

Sorry mate :), keep wallet safer next time :)

They "let" you have the private key in unencrypted format because you are in 100% control of your keys at all times. You can also download your private keys in an unencrypted format after acknowledging a warning.

Machines aren't gotten so smart to crack such a encryption in so short period of time.It would take a lifetime and even more to do so