Bitcoin Forum
May 21, 2024, 04:00:07 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Bitcoin Technical Support / Re: redeem BRD gifts : decoding breadwallet URLs (BTC gift, base64 -> base58 -> ?) on: April 22, 2022, 02:22:16 AM
...Are you sure this is non-custodial? ...

I'm presuming as much from the fact the URL alone is (was) enough to redeem the funds. (no passwords or other auth required).
That said, it's possible there may be some other cryptographic secret only BRD (now coinbase) retains.

Hence, why I was hoping someone smarter than me might take a peek at the code (GitHub linked in this thread) & weigh in.
Specifically, tracing the gift redemption path which appears to originate at the QR code logic linked here:

https://github.com/breadwallet/breadwallet-ios/blob/f90e2083ee1e908fa5793b8f3d659754166513c2/breadwallet/src/Models/QRCode.swift#L48

It interprets a (padded) base64 as the payload to distill a key, but I can't figure out if it's salted with something additional, or pretty much raw (& if I'm just screwing up the basics of unwinding the base58 etc.)
2  Bitcoin / Bitcoin Technical Support / Re: redeem BRD gifts : decoding breadwallet URLs (BTC gift, base64 -> base58 -> ?) on: April 21, 2022, 10:01:39 PM
Seems like it has already been redeemed.

Can I ask what you're basing that conclusion on?

ie. If you're trusting the (degraded by coinbase) breadwallet, for this info - bear in mind, it now erroneously reports the same status (redeemed) for all valid gift redemption attempts (even those that haven't moved from their address since being created).
3  Bitcoin / Bitcoin Technical Support / Re: redeem BRD gifts : decoding breadwallet URLs (BTC gift, base64 -> base58 -> ?) on: April 21, 2022, 07:13:39 PM
What is the result of call to "https://brd.com/x/gift/someBase64String....."?

I may be wrong, but I think the information encoded in "someBase64String" are not sufficient, if they store information about sender, recipient and amount on the server side.

I'm already out of my depth with respect to sniffing the HTTP between the hosts. If this seems fruitful, I'm open to suggestions for same.

A simple curl Huh on the URL
Code:
https://brd.com/x/gift/VDkzQVozZjFMbVBQbktiUXJSaFZENEZERWhNTTFVMVVmWFFickI2WktkWGNBSFd6b0dhQQ==


Regarding the additional info you suggest, I do have the (current & former) address of the BTC funds, txid (amounts etc.)



The plot thickens!

For anyone interested to try an alternate path, see if you can beat me to the $

Specifically, start here;

https://github.com/breadwallet/breadwallet-ios/blob/f90e2083ee1e908fa5793b8f3d659754166513c2/breadwallet/src/Models/QRCode.swift#L48

Using the following URL as your data

Code:
https://brd.com/x/gift/VDkzQVozZjFMbVBQbktiUXJSaFZENEZERWhNTTFVMVVmWFFickI2WktkWGNBSFd6b0dhQQ==

If you can report the on-chain address (& key) and I successfully replicate the method, I'll send you another URL & you can keep/sweep the entire BTC contents.

[moderator's note: consecutive posts merged]
4  Bitcoin / Bitcoin Technical Support / redeem BRD gifts : decoding breadwallet URLs (BTC gift, base64 -> base58 -> ?) on: April 21, 2022, 05:38:36 PM
I'm looking for help decoding the string representation for BTC gifts created (but not redeemed) from BRD wallet. (breadwallet)

This has nothing to do with NFTs, BRD tokens or dumb coinbase gifts/marketing. This is for BTC funds, stored in a wallet that breadWallet created when using the "Gift BTC" option of (2021/2022) breadWallet builds.

There's at least one unredeemed BTC URL in it for you, if you can provide the details that successfully allow me to accomplish this redemption.

Context:
Coinbase bought BRD
Coinbase shut down BRD (circa March 2022) along with (?) the web API that would redeem said URL from brd.com using the wallet (mobile) app.

Gifts (BTC) created in breadwallet are thus held hostage by coinbase.
Coinbase refuses (or is insufficiently competent) to assist in redemption of funds.

The gift URL from breadwallet takes the form

https://brd.com/x/gift/someBase64String.....

the base64 string can be decoded with standard base64 tools & appears to result in a base58 string.

This resulting base58 string does not take the form of a WIF Private Key. (doesn't commence with K,L,5)

I'm looking for help decoding the base58 string to (presumably) the private key. I don't know what additional decode is required or what might be represented by the raw base58 string.

The bread codebase is posted on GitHub

https://github.com/breadwallet

Here's an example base64 string from one such URL.

Code:
VDkzQVozZjFMbVBQbktiUXJSaFZENEZERWhNTTFVMVVmWFFickI2WktkWGNBSFd6b0dhQQ==

This decodes to the following (base58 string) as follows;

Code:
echo 'VDkzQVozZjFMbVBQbktiUXJSaFZENEZERWhNTTFVMVVmWFFickI2WktkWGNBSFd6b0dhQQ==' | base64 -d

T93AZ3f1LmPPnKbQrRhVD4FDEhMM1U1UfXQbrB6ZKdXcAHWzoGaA

Equivalent HEX from the base58 (pls check me on this) would be

Code:
B0B29B59EF7BA9DB3E124EFAA7FD3B55AA0728AD3ADC8165EAD177B45A8CF9DCB801

What's required to further decode the above (recall this is for BTC transferred by breadwallet)?

FWIW: I also retain the corresponding addresses where the funds currently reside. If you're able to ID same from the above, I think we're on the right track.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!