Someone posted several sources for the picture earlier.
They are all a bit different apparently:

4chan:
4 bytes before 0xd9

raw data



google cache (?):
18 bytes 0xc4 and invalid structure

raw data 0x18 bytes:

-> mntrRGB XYZ Ù


18 bytes:

-> B XYZ Ù

Reddit:
6 bytes before 0xd9

If I should win Id divide pirates style. 2 parts for me, since however gets the loot gets to be captain 2 parts for OP (as the vessel that made this possible) or any other artist that OP seems fit.  1 part each for every crew member. Ppl that helped out here currently 1 that helped out IRL and 1 for a nice dinner for my wife, since we had wedding day yesterday and I was solving riddles.

see my update above, there is a new msg.

I think we are to look behind the courtain.

I will try:


1BoRHtJva2L9YyqB1aS1zqgFUjjftNuZtJ

0.05 BTC
0.02 BTC
0.01011 BTC -> 01011000 - X
0.01011 BTC -> 01011000 - X
0.04 BTC
0.01 BTC
0.019 BTC
0.08 BTC
0.05 BTC
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,
0.001011 BTC -> 00101100 - ,

Note all of the above can also be understood as 01011000 - X
9x the number 9 seems to be of relevance in the following sequence as well.
18 = 9x2
 9 = 9x1
both a "missing" 1 Satoshi

0.023 BTC
0.022 BTC
0.021 BTC
0.02 BTC
0.019 BTC
0.01799999 BTC
0.017 BTC
0.016 BTC
0.015 BTC
0.014 BTC
0.013 BTC
0.012 BTC
0.011 BTC
0.01 BTC
0.00899999 BTC
- nope no 8
0.007 BTC
0.006 BTC
- nope no 5
0.004 BTC
- nope no 3
0.002 BTC
0.001 BTC
0.023 BTC
0.001 BTC
0.05 BTC

-------------------------------
0.007 BTC - to 1sos
0.007 BTC - to 1rEDGrN
0.007 BTC - to 1rEDGrN
-------------------------------

0.06 BTC

-------------------------------
all of the following went to:
1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz 0.01 BTC

0.01 BTC
0.01 BTC
0.1 BTC
0.05 BTC


will do the rest in a moment.


SOS Series
--------------------------------
1QJmVZyEF5wG9j2TdWeXLGcDLLdZCDzjzo
1BuopNHS4eeBnnqhe4DAagigvd6oe9o4q7
single TX
0.01010011 BTC -> 01010011 - S
--------------------------------
1MoaEzR1Sr9bA7xQwbeZr8LhocvH733Bz2
single TX
0.01001111 BTC -> 01001111 - O
--------------------------------
15VNozAfdMKQeCDXR7PeQ3i9BrJWqzJye9
single TX
0.01010011 BTC -> 01010011 - S
--------------------------------
1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu
1x 0.0054321 BTC and later 0.001 BTC

1rEDGrN Series
Full address: 1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD
--------------------------------
0.00098765 BTC - blockchain note "no more clues"
0.00404 BTC - blockchain note "http"
0.001 BTC - blockchain note "01100011 01100001 01101110 00100000 01101110 01101111 01110100 00100000 01100100 01101111 00100000 01101110 01101111 01110100 00100000 01100110 01100110 01110011"

-> can not do not ffs

currently believed to be a correction for one of the solutions found

"THEY CAN NOT ATTACK WHAT THEY CAN NOT SEE"

0.00057235 BTC


11PBsA Series
Full address: 1PBsAHYQoczQh6mufENsR4tCkKToQKjMzz
--------------------------------
0.00404 BTC
0.005 BTC
0.01 BTC
0.01001111 BTC - 01001111 - O
0.0009 BTC
- START NEW MSG-
0.00100011 BTC
0.01000011 BTC
0.01001 BTC
0.01000011 BTC
0.01001011 BTC
0.01010101 BTC
0.01010011 BTC
0.01000101 BTC
0.0101001 BTC
0.00404 BTC
0.00100001 BTC
0.010001 BTC
0.01001111 BTC
0.00100001 BTC
0.00100001 BTC
0.00100001 BTC
0.0010001 BTC
0.010001 BTC
0.01001111 BTC
0.0100111 BTC
0.01001111 BTC
0.010101 BTC
0.0010001 BTC
- END NEW MSG -
binary data for "new msg" (padded obviously)

-> #CHCKUSER!DO!!!"DONOT"

more coming
0.01001 BTC - 01001000 - H - could also be 0100100 $
0.010101 BTC - 01010100 - T - *
0.010101 BTC - 01010100 - T - *
0.0101 BTC - 01010000 - P - (

-> HTTP

various other address that are not confirmed (as in: they got no coins from 1BoRH):

1PrQb3VJLR6JvbfjNQVFchM6ePfTdD8XZM
single TX:

0.00101101 BTC -> 00101101 "-"
or 01011010 -> Z

--------------------------------
1ENnzep2ivWYqXjAodTueiZscT6kunAyYs
1F1FAfLxdamyZyeXzUdLXUYsLDE3DYPSGN
1Bet9gMZYgLMXkuvg2EDfyepFmGpytTAHD
1MEXrFi3KxTMBg2HnyAxp1nveNSwV3xkTV

2x group TX, not yet confirmed IMHO spam
https://blockchain.info/de/tx/dc08928ee4010c80febd5c2f1e20fd83a4bea3fc085756f28b49dfd6a8ee6963

--------------------------------
1B45EghVVgLCuF2eqNrj7tx6RkcgpV9VvP
1PszgWqsUujW4EYgn5nDapcUsc5K7GVVEE

single TX:

0.00111111 BTC -> 00111111 - ?
--------------------------------

-------- ZZZ series ------------
From:
- 1G7dmdKEJWx8vGW6mQZAkz7AMRaW1KEH6b
- 1FJxxi8bHvmwNKtEnayH59zgCJP8nxswq9
- 1D8xJXgAwnvHCKAPTqv3nGT9y85ioitQSt
- 1GK1vdqj3aMfW42CSzyqbHZRhRXvrTn6Jr
- 1G8RnUdAxRvea4LmrAbwRMUiHx7VA752j9
- 16njzRbXLYZCbNZyhbkN9iHSpJYJCpudZs
- 1679v52HJWiymdgcdsH68j3whzcVjvGnc3
and
16Xpxbo1NzEbp59dYmovLam4SXANapbXVo
1Di2GB5RqeoMrFd86FiGJocaaqXm9r8Mpa
each for 0.0101101 BTC - 01011010 - Z

0.005 BTC - 5
0.01 BTC  - 1
0.01001111 BTC - O
0.0009 BTC - 9

51 o 9?


The darkwallet is currently w/o gateway/obelisk server. Maybe thats what this means?

new TX from redgreen amount: 0.00057235 BTC

https://blockchain.info/de/tx/49296f9b4d714c8f6dc0ba82cdce03965b8d85a3a58ca336fd93170421e86235


and another from sos amount: 0.001 BTC

https://blockchain.info/de/tx/fad083d9d08dec5f711849539c9ce09816100cf7c6c3b28fb42af83b7cd1452d

Either that or OP made a mistake and just corrected it.

"They can not attack what they do not see"

Is not the seed for the darkwallet btw

or the background?

Also: ein bisschen Spaß muß sein

http://www.buzzfeed.com/daves4/shocking-pictures-that-prove-the-illuminati-is-all-around




or stealthaddresses. Maybe "look at all the sources" means to look at the darkwallet source?




So OP made a mistake?

http 404 DDoS? DoS?

top right (name of your wallet) -> + New Wallet -> Use real bitcoins -> Restore form seed -> enter name and password (can be anything) -> write your seed -> finish

I followed these steps:


and it just worked. There is the all seeing eye symbol at the top right corner of chrome now. If I click on it I have the wallet.

They even got a trollbox


Edit:

https://blockchain.info/tx/add14903d39bbf4ae58097bfb5682504f0fde6f0ff4018896e38be88724c9f8a
looks like OP is giving out more BTC.

I think S4VV4S was talking about me, but I prefer to ignore these questions. I dont think gender is relevant here. That said S4VV4S you can think of me as male or female I dont care. Its the internet after all

The more pressing question is: are we meant with "they" does this mean there is some hidden information. Maybe we have to manipulate the image after all. Are as S4VV4S posted earlier there are indeed information within the picture even though the tool I used earlier indicated that there are none. Well its a brute tool



Yes another hint towards the dark wallet. I allready tried to restore a wallet from the seed
"They can not attack what they can not see"
and
"They cannot attack what they cannot see"

both actually restore the same wallet and:

nothing at least not on the first 60 addresses.

I also see: youth dash one toat tips here is to words ... law

maybe thats the next riddle?

Edit:


I took the liberty to change it a bit. Read from top to bottom, first letters.

THEY CAN NOT ATTACK WHAT THEY CAN NOT SEE
IT W...
are you sure the rest is correct?

Nope cant get to a proper machine atm. But there are online cesarshifts.

tex as in latex

I dont know, but these stood out. I might have some more time tonight. Did you try to cesar shift this? Might reveal more words.

dont get excited they are just 0 bytes. Might be just data corruption.

also ELA looks normal to me.

http://fotoforensics.com/analysis.php?id=02f2441a5bbd0a9fc3b69c0a4d490516ea0ddc46.913084&show=ela

Also I know we should not brute force, but I had to make sure:
stegbreak gives nothing



Probably.

I am going to research some of the basics.

http://www.citi.umich.edu/u/provos/papers/practical.pdf

ITA2 TELEX isnt working either in case someone wondered

its a 5 bit code.

http://www.bergziege-owl.de/wp-content/uploads/2011/05/Telegraphenalphabet-ita2.jpg

raw code used

split to 5 bit parts

padded the last to 00000

and got:


crap

I still think the hints point towards some sort of binary coding.

yw

3 new TX over night:

spelling

01010011 S
01001111 O
01010011 S

they do not come from the usually address though.

there are also 2 more with 0.0054321 BTC
from 1sosB9wN5ij84GKfo6Xxx8FWyh5fPXVXu

and 0.00098765 BTC
from 1rEDGrNbuqqtbJU12XiU4hvmfM4XaQVcD

the last one also has "no more clues" has a blockchain comment.

rEDGrN was loaded from the one address we access as the one controlled by OP.

https://blockchain.info/de/tx/c353daf8bdbbf74e76ade5d11fec3b0479f20813e15aabb0988f312b04309c1b

Fibnacci looks like a deadend as well.

One of the values is
1000010100010010011
-> 100001010001001001
= 1+13+34+233+987+4181 = 5449 which isnt in base64

there is also no way to encode 0 in fib, so we would be missing 1 letter or wed need to shift by -1 to get a 0.
But 1 or 0 would be encoded 11 which is all over the code. ~ 20/80 times sounds a bit overkill to me. Might be noise but since its ignoring the yellow and blue dot(s) I stopped going down that path.



I just check it with inverted colors and the only thing that struck me was:

red and green are complementary colors
blue and yellow are complementary colors as well.

So there might be some sort of code where red/green are one thing and yellow/blue are another thing complementy.

E.g. yellow = shift left, blue = shift right.





this one?

nice summary, it made me think about
3, 5, 8, 13 (the countdownpause tonight)

fibonacci code? Not sure if thats working with the yellow and blue dot(s).

Will read into that tomorrow and try to work it on the dots.

If you turn the picture upside down, some of the letters look different. If you only take those that are readable.

you get:

t9z6omSEnqmqpHtwEuWqxId OppHn6bmqonXHIN nwzt8oS

the part in the middle is where the address would be located, thus leave it out.

t9z6omSEnqmqpHtwEuWqxIdnwzt8oS

take the rest, flip it.

So8tzwndIxqWuEwtHpqmqnESmo6z9t

sha256(So8tzwndIxqWuEwtHpqmqnESmo6z9t?) = 3a2959af27b238a98d8bac4222e055827c73362b551a8f1c98769b0f29cde276

:C not well formed.

double check

0x7db4d88698f1eb106899bbda79b4c824aa23fdefaff7eabc2c7ffe73de600f3c -> base58 = 5JmeaoDScTcNj6uxHvWRd9annxnzSN6zhBiug7oAJPxNXC7v7Yp
leads to -> 14q7NX2FU7dfHyrjsLuFi6w6qWokgxDKqP

yep, as suspected wrong address.