If you really are serious that you found a vulnerability then you had better follow the instructions at https://bitcoincore.org/en/contact/ to securely email the developers. Do not open a Github issue or post a proof of concept publicly so that you don't reveal it to hackers.

But the general gist of this thread seems to be that you are bluffing so you should prove otherwise if you want to be taken seriously.

Is this a list of private keys you already have that you want to check... or are you wanting to someone magically find private keys that have a balance so you can "steal" it?

If it's the first... how many private keys are you wanting to check?

Wait until t3xoff discovers he can find all creditcards in existence by counting from 00000000000000001 to 9999999999999999 ! Even if your computer can only generate 1 million numbers per second, you'll find many valid cards per minute!

I'm not sure if OP is a troll, dumb, or really just clueless (or all of the above), but the size of large random numbers usually go straight against the intuition of the average person. We're all so used to create accounts online and have someone verify them for us, that it's really hard to believe Bitcoin allows you to create a private key on your own without connecting to the internet. It's really an amazing thing if you think about it

It's been almost a month since you found a "security flaw" in Bitcoin (BITCOIN SECURITY).
Please let us know if you already found any balance from the "infinite private keys" that you've found.

You can have both Python 2 and 3 on your system at the same time.
Depending on if you are running Windows or linux the method is a bit different, but both are easy to do.
If you want it in it's own bubble, just spin up a VM and put the other version there.

This is programming 101. All of our programmers have to setup their PCs with PHP versions 7.3.x, 7.4.x and 8.0.x so they can bounce code off of any of them.
If you can't figure out how to do it, you probably should not be working with code.

-Dave

Why don't you just install Python 2?

Have you thought about giving a Python 2 to Python 3 converter a try? Since it's just a handful of files it could actually work pretty well:
https://dev.to/rohitnishad613/convert-python-2-to-python-3-in-1-single-click-2a8p

Here's the docs on the 2to3 library:
https://docs.python.org/3/library/2to3.html


Also of course there's the tool that the Python source is based on:
https://iancoleman.io/bitcoin-key-compression/

Use the above for testing only, for everything else fetch the source here:
https://github.com/iancoleman/keycompression

This is not a weakness and you have not found some big security flaw. This is exactly how bitcoin is supposed to work.

Anyone in the world can generate thousands of even millions of valid private keys if they want. It's as simple as starting at 1 and counting up. Pick any number between the two numbers in BlackHatCoiner's reply, and you have found a valid private key. The reason you can't find anyone else's coins is because of the sheer size of that second number. Even if every computer on the planet did nothing but grind private keys for the rest of time, the sun would die and humans would be extinct before you found a collision.

Have you studied how things work in cryptography? Or just in Bitcoin? You've registered recently and you keep trying to find a way to cheat the system. Cheating the system isn't as easy as it seems. It's way harder than you thing and infeasible if each user was cautious enough.

This isn't a nice wording. First off, you'll have to define us what you mean by saying “infinity”. Infinite different keys? If yes, then that's impossible, because there's a specific number of available private keys.

Specifically, you cannot pick a number outside the following range as a private key:


You're probably referring to the developers. They don't maintain Bitcoin; this task is being managed collectively by the network. They're the ones who contribute by coding.

Here they are: https://github.com/bitcoin/bitcoin/graphs/contributors

Anyone can.

To whoever you report it, if it's indeed a security flaw, we'll all gonna learn it.

If I were you, if you really make money through that. I'd rather just hide that. You will earn a lot just in case.

Yes, of course. All you have to do is find my private key on the list. I wish you luck.



No... my post was a joke. It doesn't matter if you can generate 2^256 private-keys (and of course you can generate as many as you want). The thing is that it would take billions and billions of years before you could find the private key of a funded address.

You're late, my friend.

The flaw was already found out and it's out there. Unfortunately, devs don't care.

Proof: https://keys.lol/bitcoin/1

You're late, my friend.

The flaw was already found out and it's out there. Unfortunately, devs don't care.

Proof: https://keys.lol/bitcoin/1

The error in your script says invalid literal for int() with base 16: '' which means that the Bitcoin script that you, or the program, is trying to parse has an out-of-range start and/or end index (because the input passed to int() is the empty string).


The only way that something like this can result in an empty string is if the script passed is way too short.

So some of your rawtx's may be too short, maybe you mistakenly truncated them when passing them as input?