Bitcoin Forum
May 09, 2024, 09:10:47 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1] 2 3 4  All
  Print  
Author Topic: 50 BTC lost because of blank passphrase  (Read 8203 times)
GermanGiant (OP)
Hero Member
*****
Offline Offline

Activity: 784
Merit: 500



View Profile
July 29, 2015, 09:59:33 PM
 #1

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30
1715289047
Hero Member
*
Offline Offline

Posts: 1715289047

View Profile Personal Message (Offline)

Ignore
1715289047
Reply with quote  #2

1715289047
Report to moderator
1715289047
Hero Member
*
Offline Offline

Posts: 1715289047

View Profile Personal Message (Offline)

Ignore
1715289047
Reply with quote  #2

1715289047
Report to moderator
Even if you use Bitcoin through Tor, the way transactions are handled by the network makes anonymity difficult to achieve. Do not expect your transactions to be anonymous unless you really know what you're doing.
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715289047
Hero Member
*
Offline Offline

Posts: 1715289047

View Profile Personal Message (Offline)

Ignore
1715289047
Reply with quote  #2

1715289047
Report to moderator
1715289047
Hero Member
*
Offline Offline

Posts: 1715289047

View Profile Personal Message (Offline)

Ignore
1715289047
Reply with quote  #2

1715289047
Report to moderator
1715289047
Hero Member
*
Offline Offline

Posts: 1715289047

View Profile Personal Message (Offline)

Ignore
1715289047
Reply with quote  #2

1715289047
Report to moderator
unamis76
Legendary
*
Offline Offline

Activity: 1512
Merit: 1009


View Profile
July 29, 2015, 10:03:05 PM
 #2

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...). I guess we live and learn, unfortunately the amount of coins was significant.
GermanGiant (OP)
Hero Member
*****
Offline Offline

Activity: 784
Merit: 500



View Profile
July 29, 2015, 10:05:30 PM
 #3

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...). I guess we live and learn, unfortunately the amount of coins was significant.

It is also possible that the guy swiped the coins himself. But, as I can see, even after 80+ confirmation blockchain.info is showing the outgoing Tx as double spend.
jwcastle
Member
**
Offline Offline

Activity: 117
Merit: 10


View Profile WWW
July 29, 2015, 10:06:58 PM
 #4

Looks like more than 1 person tried to claim that 50 BTC.


BitcoinEval.com - Evaluate your Bitcoin earnings
CPR
gentlemand
Legendary
*
Offline Offline

Activity: 2590
Merit: 3013


Welt Am Draht


View Profile
July 29, 2015, 10:07:44 PM
 #5


Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...).


I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

I don't really get why anyone indulges in them.
PolarPoint
Hero Member
*****
Offline Offline

Activity: 672
Merit: 500


View Profile
July 29, 2015, 10:33:26 PM
 #6

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

There are bots which scans famous quotes, bible quotes, song lyrics, everything a person can think of plus small mutations. I feel sorry for anyone who lost coins this way. Any brainwallet generated from phrases just aren't safe, people have to learn their lesson the hard way.
unamis76
Legendary
*
Offline Offline

Activity: 1512
Merit: 1009


View Profile
July 29, 2015, 10:45:00 PM
 #7

This is a known address, it's the default example from brainwallet. The person who sent it there either made a donation to the wrong address or made a big mistake, unfortunately.

Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...). I guess we live and learn, unfortunately the amount of coins was significant.

It is also possible that the guy swiped the coins himself. But, as I can see, even after 80+ confirmation blockchain.info is showing the outgoing Tx as double spend.

Yes, that's a possibility too, but a very optimistic one Cheesy


Since it was probably a mistake, it should be returned, but we all know that doesn't happen (much often...).


I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

I don't really get why anyone indulges in them.

Yes, bots exist... People are after free and easy coins, I guess... Roll Eyes
Remember remember the 5th of November
Legendary
*
Offline Offline

Activity: 1862
Merit: 1011

Reverse engineer from time to time


View Profile
July 29, 2015, 10:46:26 PM
 #8

I am envious.

BTC:1AiCRMxgf1ptVQwx6hDuKMu4f7F27QmJC2
oblivi
Hero Member
*****
Offline Offline

Activity: 700
Merit: 501


View Profile
July 29, 2015, 10:49:08 PM
 #9

I was under the impression there are bots out there dedicated to scanning for obvious brain wallets. That's the most obvious one of all by the sounds of it. Goodnight, sweet coins.

There are bots which scans famous quotes, bible quotes, song lyrics, everything a person can think of plus small mutations. I feel sorry for anyone who lost coins this way. Any brainwallet generated from phrases just aren't safe, people have to learn their lesson the hard way.

Thats why I would never, ever store my main stack within something that can be generated out of thin air. There's no way im ever moving my coins from my local offline hardware unless I want to have spare BTC on my mycellium wallet. Brainwallet sounds good but better stay a paranoid and go good ol offline.
Nexious
Full Member
***
Offline Offline

Activity: 140
Merit: 100

Nexious.com Admin


View Profile WWW
July 29, 2015, 10:51:15 PM
 #10

It was a well known brain wallet address, either it was a mistake or done on purpose. If it was a mistake I feel sorry for the person, but sending that large amounts you would double check everything before you sent.

https://nexious.com - Bitcoin Mining Pool - 5BTC Block Finder Bonus!*
foodstamps
Hero Member
*****
Offline Offline

Activity: 938
Merit: 502



View Profile
July 29, 2015, 11:53:28 PM
 #11

Pretty crazy stuff, whether it was a mistake or not. I know the feeling though, I have sent BTC to the wrong address before(never anything near that much though).
Gleb Gamow
In memoriam
VIP
Legendary
*
Offline Offline

Activity: 1428
Merit: 1145



View Profile
July 30, 2015, 01:33:49 AM
 #12

It was a well known brain wallet address, either it was a mistake or done on purpose. If it was a mistake I feel sorry for the person, but sending that large amounts you would double check everything before you sent.

This might help.  Looks like he might have been warning you?  1brain = GoodGuy bitcoin stealer lol.

From: https://news.ycombinator.com/item?id=7365663

Perhaps this comment will start a good discussion, or maybe people won't like it because I'm one of the thieves mentioned. I'm the owner of the 1brain7kAZxPagLt2HRLxqyc3VgGSa1GR address.

First, for those curious, the passphrases of the wallets taken from so far:

19JsLFDRxuTsAjapE79FgoVNdNdB2hNU5M - "alfanumerico" (0.36875 BTC)

1PQiixL1SyytXoUGFBGA5ptW9uTjsBrdhX - "emergency" (0.00085 BTC)

1CqRJYoztkWifUYadFg13MHdmECx6uEdy7 - "butterfly" (0.00025 BTC)

16ga2uqnF1NqpAuQeeg7sTCAdtDUwDyJav - "password" (0.00085 BTC)

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN - "" (0.474972 BTC)

1HoSFymoqteYrmmr7s3jDDqmggoxacbk37 - "hello" (0.000555 BTC)

1C7zdTfnkzmr13HfA2vNm5SJYRK6nEKyq8 - "correct horse battery staple" (0.243762 BTC)

1JwSSubhmg6iPtRjtyqhUYYH7bZg3Lfy1T - "correct horse battery staple" (0.000079 BTC)

The implementation isn't particularly exciting. I have a PostgreSQL database containing a single `address' table storing (address, privKey, passphrase). Of course, the passphrase doesn't actually need to be stored, but I kept it around to satisfy my own curiosity. I run a modified bitcoind client that checks each transaction it hears about (in CTxMemPool::accept) to see if any of the outputs are in my database. If they are, a transaction is created, signed and broadcast to send the same number of BTC (minus fees) to 1brain7kAZxPagLt2HRLxqyc3VgGSa1GR.

I just wanted to point out that, when I started this, it was not for financial gain. I simply saw it as a fun and interesting exercise about the Bitcoin protocol. I wanted to see if I was capable to "winning the race" -- trust me when I say there are loads of people out there "mining" brainwallets, and whosever transaction is included in a block first tends to win and get the Bitcoin. I never expected to gain over 1 BTC, I think I got rather lucky. My database contains 19,412,020 passphrases (mostly single passwords, actually) which all came from various wordlists I found online. I consider this to be a fairly small dictionary, based on what I've read about other people doing the same thing. I originally had plans to make the database much bigger, however I've since moved onto other projects.

I'm happy to answer questions if people have any. There's a signed version of this comment at http://pastebin.com/s29kk2bb, which you can verify (rather ironically) at http://brainwallet.org/#verify.
jonald_fyookball
Legendary
*
Offline Offline

Activity: 1302
Merit: 1004


Core dev leaves me neg feedback #abuse #political


View Profile
July 30, 2015, 01:50:57 AM
 #13

why are there two addresses for correct horse battery staple?

Pursuer
Legendary
*
Offline Offline

Activity: 1638
Merit: 1163


Where is my ring of blades...


View Profile
July 30, 2015, 03:01:29 AM
 #14

why are there two addresses for correct horse battery staple?

brainwallet has two modes for creating private keys called "Point Conversion" which makes compressed and uncompressed private keys, hence two different addresses.

Only Bitcoin
btccashacc
Legendary
*
Offline Offline

Activity: 1120
Merit: 1000


View Profile
July 30, 2015, 05:06:52 AM
 #15

A blank passphrase creates the following Address/Private key combination.

1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN / 5KYZdUEo39z3FPrtuX2QbbwGnNP5zTd7yyr2SC1j299sBCnWjss

Someone sent 50 BTC today to this 1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN...

https://blockchain.info/tx/65e1ce741c6f756cf0c36b49a59ba77d7aab82b09acde63c4052bbd6bf1c7050

Within 10 minutes it was moved out...

https://blockchain.info/tx/84ef741c9178a62ca405c7addefe3805ac443dcef1ee3051e5a0a18e1a65cc30

fuck that $ 14,463.50 :O
cointell
Full Member
***
Offline Offline

Activity: 153
Merit: 100


View Profile
July 30, 2015, 05:45:39 AM
 #16

why are there two addresses for correct horse battery staple?

brainwallet has two modes for creating private keys called "Point Conversion" which makes compressed and uncompressed private keys, hence two different addresses.

Yep, and the two addresses for the empty string are:

https://blockchain.info/address/1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN
https://blockchain.info/address/1F3sAm6ZtwLAUnj7d38pGFxtP3RVEvtsbV
Kprawn
Legendary
*
Offline Offline

Activity: 1904
Merit: 1073


View Profile
July 30, 2015, 06:15:01 AM
 #17

Well it's been flagged --> " Warning! this bitcoin address contains transactions which may be double spends. You should be extremely careful when trusting any transactions to or from this address. "

I see test transactions being performed, so it's going to go down the rabbit whole very soon, if it's stolen coins. How can people make a mistake like that with 50 BTC?

I hope for their sake that is not a mistake... Thats a lot of money in anyone's language. It's amazing how fast these bots are to catch up on that... or was it just a test? 

THE FIRST DECENTRALIZED & PLAYER-OWNED CASINO
.EARNBET..EARN BITCOIN: DIVIDENDS
FOR-LIFETIME & MUCH MORE.
. BET WITH: BTCETHEOSLTCBCHWAXXRPBNB
.JOIN US: GITLABTWITTERTELEGRAM
S4VV4S
Hero Member
*****
Offline Offline

Activity: 1582
Merit: 502


View Profile
July 30, 2015, 08:30:56 AM
 #18

4 bots attempted to clean it out:

https://blockchain.info/tx-index/96343089
https://blockchain.info/tx-index/96341462
https://blockchain.info/tx-index/96344575
https://blockchain.info/tx-index/96343087
Mickeyb
Hero Member
*****
Offline Offline

Activity: 798
Merit: 1000

Move On !!!!!!


View Profile
July 30, 2015, 08:42:47 AM
 #19

Well it's been flagged --> " Warning! this bitcoin address contains transactions which may be double spends. You should be extremely careful when trusting any transactions to or from this address. "

I see test transactions being performed, so it's going to go down the rabbit whole very soon, if it's stolen coins. How can people make a mistake like that with 50 BTC?

I hope for their sake that is not a mistake... Thats a lot of money in anyone's language. It's amazing how fast these bots are to catch up on that... or was it just a test? 

When you are not careful enough shit happens really fast. 50 BTC is a lot, but I have witnessed people being less or same careful with amounts of 500 BTCs and higher. Didn't some user of this forum guard his passwords and wallet.dat files unencrypted on the cloud and he got hacked for more than 1000 BTCs.

Luckily he managed to negotiate the return of funds with the thief. I guess that some people never learn.
RocketSingh
Legendary
*
Offline Offline

Activity: 1662
Merit: 1050


View Profile
July 30, 2015, 09:10:59 AM
 #20

Well it's been flagged --> " Warning! this bitcoin address contains transactions which may be double spends. You should be extremely careful when trusting any transactions to or from this address. "

I see test transactions being performed, so it's going to go down the rabbit whole very soon, if it's stolen coins. How can people make a mistake like that with 50 BTC?

I hope for their sake that is not a mistake... Thats a lot of money in anyone's language. It's amazing how fast these bots are to catch up on that... or was it just a test? 

When you are not careful enough shit happens really fast. 50 BTC is a lot, but I have witnessed people being less or same careful with amounts of 500 BTCs and higher. Didn't some user of this forum guard his passwords and wallet.dat files unencrypted on the cloud and he got hacked for more than 1000 BTCs.

Luckily he managed to negotiate the return of funds with the thief. I guess that some people never learn.

Yah. Here is the thread => https://bitcointalk.org/index.php?topic=686275.0

Pages: [1] 2 3 4  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!