How did this address come into being 1BitcoinEaterAddressDontSendf59kuE?

[NeoCortX]

How in the world did that address come into being?

http://blockchain.info/address/1BitcoinEaterAddressDontSendf59kuE


I'm trying to brute force a simple bitcoin address of 6 or 7 characters, and it takes quite a bit of computer power. If someone can brute force such an address, why can they not just brute force my address?

[1714767519]

1714767519

[1714767519]

1714767519

[1714767519]

1714767519

[Inaba]

Because there is no known private key to that address.  You can have any address you want if you don't care about retrieving the funds.

[DannyHamilton]

An address is simply a set of bytes that meet a set of requirements (starting with 1, last 4 bytes are the first 4 bytes of a double SH256 hash of the rest of the bytes).  There is no requirement that someone know the private key for an address to be valid.

This address is exactly what it says it is: A Bitcoin Eater, Don't Send.

That is because, while it meets all the necessary requirements to receive bitcoins, nobody has the private key to it to be able to spend them.  Once coins are sent there, they are stuck there forever.

[Foxpup]

Nobody brute forced anything. They just took the string they wanted, stuck a correct checksum on the end to make it a "valid" Bitcoin address, and that's it. They did not find a private key whose public key hashes to that string, which is what you need to do if you want to actually spend coins sent to an address.

[NeoCortX]

Ok, that's cool. I got a bit afraid for a second.

How do I go ahead if I want to create my own address like that?
I want the address without the private keys.
Are there some tools that allow me to create the correct checksum?

[Hexadecibel]

I love how people have sent a total of BTC0.26 to it anyway...

[crazyates]

Ok, that's cool. I got a bit afraid for a second.

How do I go ahead if I want to create my own address like that?
I want the address without the private keys.
Are there some tools that allow me to create the correct checksum?

Yep. See this thread: https://bitcointalk.org/index.php?topic=25804.0

[casascius]

My Casascius Bitcoin Address Utility has a Base58 calculator with an option that allows ignoring and recalculating the checksum.

https://casascius.com/btcaddress-alpha.zip

Here is how you would go about it:

1. Use the Base58 calculator tool
2. Enter the address you want, which of course it will say "invalid".  Add a question mark to the end of the address.  This ignores the checksum failure.  (If the invalid doesn't go away, you may have characters like O, I, l, 0, which are never acceptable in addresses regardless of checksum)
3. Ensure that the hex is 21 bytes and that the first byte is 00.  The remaining bytes can be anything and don't matter.  You must have exactly 21 bytes, so add or remove bytes to/from the end until you do.
4. Convert the hex back into a bitcoin address (can be done by making any trivial edit to the hex field, like adding a space to the end).  The address will be recomputed with the correct checksum.

EDIT to add warning: This is how you make a black hole address, not a vanity address.  I just want to make clear that by doing this procedure, you will be making an address that bitcoin clients will accept as valid, but any coins sent to any address created this way will be permanently stuck there, essentially they're lost.

[odolvlobo]

Ok, that's cool. I got a bit afraid for a second.

How do I go ahead if I want to create my own address like that?
I want the address without the private keys.
Are there some tools that allow me to create the correct checksum?

Yep. See this thread: https://bitcointalk.org/index.php?topic=25804.0

That thread is not what you want.

The bitcoin wiki describes how the address is created. You start from step 9 and work backwards.

https://en.bitcoin.it/wiki/Technical_background_of_Bitcoin_addresses

Also, you can use this page to make sure the address is valid.

http://gobittest.appspot.com/Address

[casascius]

any coins sent to any address created this way will be permanently stuck there, essentially they're lost.

You mean private key that creates such address would not be valid, e.g. one could not import it into wallet?

It's not that the private key would be invalid, it's that it would be unknown to you, the same as if it were someone else's address and not yours.  It would be unknown to everyone else too, which is why the coins would be forever lost.

The hex bytes are not the private key, but the hash.

[caveden]

1BitcoinEaterAddressDontSendf59kuE can be created using some private key, right? If yes, coins are not stucked permanently.

Yes, they are. The corresponding private key will never be found, as that would be the equivalent of brute forcing it.
Unless, of course, some critical flaw is found in the algorithms used by BTC that would allow for a private key to be found without having to brute force it. That's not something you should be afraid of.

[BurtW]

If you like that address check this out:

https://bitcointalk.org/index.php?topic=90982.msg1318333#msg1318333

I also wrote up an explaination (for Phinnaeus Gage) of how these addresses are created here:

https://bitcointalk.org/index.php?topic=90982.msg1318808#msg1318808

[BurtW]

1BitcoinEaterAddressDontSendf59kuE can be created using some private key, right? If yes, coins are not stucked permanently.

Actually many public/private key pairs will hash to this address.

Still, you will never find any of them.  Ever.  Unless flaw is found as stated above.

[BurtW]

1BitcoinEaterAddressDontSendf59kuE can be created using some private key, right? If yes, coins are not stucked permanently.

Actually many public/private key pairs will hash to this address.

Still, you will never find any of them.  Ever.  Unless flaw is found as stated above.

I belive you are refering to insane small chance, but my point is = if there is a chance, "stucked permanently" is not true. Use proper terms.

If something cannot happen within the heat death of the universe it is, for all practical puposes, impossible.

Being the optimist you are about finding one of these you might run this program:  https://bitcointalk.org/index.php?topic=107172.0

To make it worth your time be sure to look for one or all of these addresses: https://bitcointalk.org/index.php?topic=92423.0;topicseen

But be sure to constantly keep the addresses you are looking for up to date as the richest addresses do change.

Good luck!  You are going to need it.

[casascius]

1BitcoinEaterAddressDontSendf59kuE can be created using some private key, right? If yes, coins are not stucked permanently.

Actually many public/private key pairs will hash to this address.

Still, you will never find any of them.  Ever.  Unless flaw is found as stated above.

I belive you are refering to insane small chance, but my point is = if there is a chance, "stucked permanently" is not true. Use proper terms.

I think the term is proper.

If you were going to a football game next weekend, you wouldn't call it improper to say so and not qualify it with "as long as I don't die first".  And yet that is far more likely, like a billion billion billion times more likely than "permanently stuck" coins getting unstuck.

[wabber]

No matter how many times you repeat "billion", there might be computer - or entity - one day that will do the job in an instant.

I am arguing here just because there are way too many people like you, spreading LIES around. Be factual or be quiet, thanks!

No. There won't be such a machine, never. No matter how fast your computer is there's a theoretical minimum amount of energy required to compute a private/public key and the corresponding address. No matter how efficient your computer is, you won't be able to get below that. Practically you won't even get close. That means we are able to calculate the AVERAGE amount of energy needed to brute force the priv key for a given address, and that energy is far more than the sun emits in it's entire life. If humanity is able to use the energy of multiple stars we are probably advanced enough to forget about currencies in general.

So forget about brute forcing once and for all. However the algorithm can be flawed, but that's something else. Flawed usually means that you can speed it up by less than 100 times You would usually still have more than a lifetime to convince everyone to switch to a new algorithm.

[DannyHamilton]

No matter how many times you repeat "billion", there might be computer - or entity - one day that will do the job in an instant.

I am arguing here just because there are way too many people like you, spreading LIES around. Be factual or be quiet, thanks!

You are mistaken.  Unless a weakness is discovered in the hashing algorithm and ECDSA (and there is no reason to assume that such a weakness will turn up), any address with a randomly generated private key (and all of these addresses created without a private key essentially have an unknown random private key) cannot and will not be found in the amount of time that our sun continues to exist.  If you believe otherwise, then you don't understand just how large these numbers are.

[jl2012]

An address is simply a set of bytes that meet a set of requirements (starting with 1, last 4 bytes are the last first 4 bytes of a double SH256 hash of the rest of the bytes).  There is no requirement that someone know the private key for an address to be valid.

This address is exactly what it says it is: A Bitcoin Eater, Don't Send.

That is because, while it meets all the necessary requirements to receive bitcoins, nobody has the private key to it to be able to spend them.  Once coins are sent there, they are stuck there forever.

FTFY

[DannyHamilton]

Don't wanna discuss more with same sort of people that not so long ago claimed human flying and space travel are impossible.

You've got the reality and fantasy side of this conversation backwards.  If you are going to try to claim that computers will eventually be capable of the necessary brute force calculations to find the private key for a given address, then I'm not interested in carrying discussions any further with the sort of person that would be likely to claim that a perpetual motion (or over-unity) machine can eventually be built.

[kjj]

Don't wanna discuss more with same sort of people that not so long ago claimed human flying and space travel are impossible.

This is different.

Start with a 256 bit counter, set to any number you like.  On the secp256k1 curve, do an EC multiply of the value in the counter by the point at (0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798,0x483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8).  Now hash that result in RIPE-MD160.  If you got 0x759d6677091e973b9e9d99f19c68fbf43e3f05f9 as the result, you found the pubkey for the bitcoin eater address.  If not, increment the counter and try again.

Do that 2¹⁶⁰ times, and you have a decent chance* at finding it.  And every other address.

Of course, the entire bitcoin network has done less than 2⁷⁰ hashes since it started.  We can't expect to do much better than ol' Gordy predicted so long ago, but figure we double the amount of work done in each year.  That means one bit per year, which means 90 years between today and 2¹⁶⁰.

Except that EC multiplication is harder than hashing.  And that we are very unlikely to beat Moore's law in the long run.

Still, the 160 bit hash is by far the weakest link in bitcoin, by a factor of 2⁹⁶ and I suspect that they will gradually fade from favor over the next 50-100 years.

* Only a chance.  We don't have know that the output of RIPE-MD160 is evenly distributed.  It is possible that there is no input that gives that output, and more likely, it is possible that no bitcoin pubkey gives that output.