Bitcoin Forum
August 15, 2018, 08:58:41 AM *
News: Latest stable version of Bitcoin Core: 0.16.2  [Torrent].
 
   Home   Help Search Donate Login Register  
Pages: « 1 2 3 [4]  All
  Print  
Author Topic: Thoughts on this private key stealing mystery  (Read 9355 times)
dado7
Full Member
***
Offline Offline

Activity: 294
Merit: 137


View Profile
January 08, 2018, 09:48:05 AM
 #61

OK, this vulnerability got me thinking and really should be read by everyone so that we can all broaden our views a little bit. Bitfools commentary really made me laugh and I agree with him to certain extent, but I wouldn't say it is a fairy tale - it is obvious that this lady/guy has put some effort and at least I am glad there was a through research made by blockchain.info.

This case and case of Large Bitcoin collider shows us that, no matter how safe we believe the technology to be, we have to continue to read, research, study, and adapt. Always remember that the producers of Titanic believed it to be unsinkable and remember that the human race has a vast history of adopting something it had not been ready for yet (nuclear energy for example....).


1534323521
Hero Member
*
Offline Offline

Posts: 1534323521

View Profile Personal Message (Offline)

Ignore
1534323521
Reply with quote  #2

1534323521
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1534323521
Hero Member
*
Offline Offline

Posts: 1534323521

View Profile Personal Message (Offline)

Ignore
1534323521
Reply with quote  #2

1534323521
Report to moderator
robolove
Member
**
Offline Offline

Activity: 130
Merit: 10


View Profile
January 30, 2018, 04:32:03 PM
 #62

Mind=blown

Wrote a couple of scripts and tested myself. Shit is real. Take a look at this guy, for example. Last transaction only a couple of days ago:

https://blockchain.info/address/1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN

"Jeff was here" is all over the blockchain. Guess he (she/it) has a compiled majestic wallet with a script that immediately transfers any incoming transaction to his own safe addresses.

Congrats Jeff.
wijaywi
Newbie
*
Offline Offline

Activity: 13
Merit: 0

bitcoin:11111111111111W1jaywiWzxpTmu


View Profile
February 01, 2018, 03:35:06 AM
 #63

yes I also have been aware of that .. when I was found the private key made from the bitcoin address created from the "genesis-address transaction(block0)" .. and found there's a  transactions in that address.

.by the way ..who is the owner of this "vanity address eater" bot
(1aa5cmqmvQq8YQTEqcTmW7dfBNuFwgdCD)
Huh
  Grin


8963668642943990826242042207998010011109324268....
robolove
Member
**
Offline Offline

Activity: 130
Merit: 10


View Profile
February 02, 2018, 10:51:23 AM
 #64

sha256(666) leads to 1Az4F5yC19WZt5XMuc6x11xJM81VcJyHQA which in 2014 received 666 satoshi. Hell, that's funny.
qu4ntum
Newbie
*
Offline Offline

Activity: 2
Merit: 0


View Profile
February 07, 2018, 10:44:24 PM
 #65

 I was trying to do the same steps pointed in the original article, but first of all I tried to get the whole database from the blockchain.
I used ABE library to copy the data from bitcoinCore to a SQL database, unfortunately, It take a looooong time to make this job. So, I was wondering if anyone could tell me how to make this job as faster as possible. I'm trying to do this as exercise. I'm new in the bitcoin world, but i'm used to programming in a python and C/C++ throughout my career.
Could anyone explain me the faster way to put the whole blockchain into a database?

Thanks for your time!
systemist
Jr. Member
*
Offline Offline

Activity: 54
Merit: 0


View Profile
March 08, 2018, 03:40:26 AM
 #66

Mind=blown

Wrote a couple of scripts and tested myself. Shit is real. Take a look at this guy, for example. Last transaction only a couple of days ago:

https://blockchain.info/address/1HZwkjkeaoZfTSaJxDw6aKkxp45agDiEzN

"Jeff was here" is all over the blockchain. Guess he (she/it) has a compiled majestic wallet with a script that immediately transfers any incoming transaction to his own safe addresses.

Congrats Jeff.

I've read your post and seen that you wrote a script for this, can I see the script that you wrote? I would like to know how it works and reverse engineer this particular script.
Please pm me. Thanks!
Tai_Pan
Sr. Member
****
Offline Offline

Activity: 357
Merit: 251



View Profile
March 08, 2018, 02:23:39 PM
 #67

If I were able to find a private key from an address with a decent amount I would really consider to go Robin Hood-ish on it...
There are so many people in desperate need that it would worth it

Hysmagus
Newbie
*
Offline Offline

Activity: 1
Merit: 0


View Profile
March 25, 2018, 06:43:16 PM
 #68

From the digging the user /u/n0mdep did on reddit, it appears to be an old PHP library issue, wallets using this library may be a possible source. One of the addresses ("1JCuJXsP6PaVrGBk3uv7DecRC27GGkwFwE") is mentioned in a 2017 PHP bitcoin shopping cart issue. https://github.com/coinables/Bitcoin-NoAPI-Shopping-Cart/issues/2
hell78
Newbie
*
Offline Offline

Activity: 18
Merit: 0


View Profile WWW
March 29, 2018, 05:17:20 PM
 #69

I was trying to do the same steps pointed in the original article, but first of all I tried to get the whole database from the blockchain.
I used ABE library to copy the data from bitcoinCore to a SQL database, unfortunately, It take a looooong time to make this job. So, I was wondering if anyone could tell me how to make this job as faster as possible. I'm trying to do this as exercise. I'm new in the bitcoin world, but i'm used to programming in a python and C/C++ throughout my career.
Could anyone explain me the faster way to put the whole blockchain into a database?

Thanks for your time!

I would like to know as well. What software he used to store database and also what program to manipulate/query it

Anyone know what program to create a bot with?
fairponzi
Jr. Member
*
Offline Offline

Activity: 32
Merit: 0

https://fairponzi.github.io/


View Profile WWW
May 21, 2018, 11:25:08 AM
 #70

I was trying to do the same steps pointed in the original article, but first of all I tried to get the whole database from the blockchain.
I used ABE library to copy the data from bitcoinCore to a SQL database, unfortunately, It take a looooong time to make this job. So, I was wondering if anyone could tell me how to make this job as faster as possible. I'm trying to do this as exercise. I'm new in the bitcoin world, but i'm used to programming in a python and C/C++ throughout my career.
Could anyone explain me the faster way to put the whole blockchain into a database?

Thanks for your time!

I would like to know as well. What software he used to store database and also what program to manipulate/query it

Anyone know what program to create a bot with?
You can use https://www.visualstudio.com

https://fairponzi.github.io/
f3tus
Sr. Member
****
Offline Offline

Activity: 291
Merit: 260


View Profile
July 16, 2018, 01:39:43 PM
 #71

I did something similar with Ethereum:

d4e56740f876aef8c010b86a40d5f56745a118d0906a34e69aec8c0db1cb8fa3 is the Genensis hash of Ethereum, which is also used as the private key of this address: 0xf7656Eeec49cC7c2DBee3c08c9f203B25F093cDF

The Merkle root of Bitcoin block 229670 f7a9b2306585fb4801e4b61424dd5523c50f18b2b10011583f265b1d70f481ea is the private key of this address: 0xb8629E8E54f393DCAc2990e59887594C94A7E45F

The hash of Bitcoin block 478610 00000000000000000028389f5b592cbf08ca0451c675432f6060f97d8425fe51 is the private key of this address: 0x91f5A4A03614F131B36671006511f75580c4E550 (a user on BitcoinTalk.org used it, I contacted him to change it)

SHA-256 of the Bitcoin Genesis address 1A1zP1eP5QGefi2DMPTfTL5SLmv7DivfNa, which is 31a9d2e8a70a091d65a58d2a08f8833abf5e8fa1d741c5400c538c38668cb83e, is the private key of this address: 0x700683cFcFE580318CB338E1a8AfCe6C25bB8ceB

Some "brain-wallets":

SHA-256: password : 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8 : 0xfb35AD702E715E61A3F362C62DA7C1BD235102FC
Keccak-256: 123456789 : 2a359feeb8e488a1af2c03b908b3ed7990400555db73e1421181d97cac004d48 : 0x62F689837da39B1B50aD39D79E924989E340E0bB
Keccak-256: hello : 1c8aff950685c2ed4bc3174f3472287b56d9517b9c948127319a09a7a36deac8 : 0x5ccfa55C29F0522f062E3C15004E35a69dD45F6B
SHA-256: asdf : f0e4c2f76c58916ec258f246851bea091d14d4247a2fc3e18694461b1816e13b : 0x5aF95f4e0803B739E49B1239bB5Fbe91bD058caD
Keccak-256: testing : 5f16f4c7f149ac4f9510d9cf8cf384038ad348b3bcdc01915f95de12df9d1b02 : 0x89112E3aE3D40362373153c9f08D665ED1e39a7c
Keccak-256: spiderman : ed16b5577f12fd01d27e13991713b21024a88f47de0a0cc9683c6b9391636ad9 : 0xE607194804516037b14Aa050584c4e950975b0F3
Keccak-256: knickers : 6f4fb7f3b1f4ba1b2d4ee901fff911e8ab97299dade221706b7ee65d72343c7a : 0x5de7e496AAc28C05b93d05e4449635b08AEB26Bb
Keccak-256: eeee : 6a7eac42970039e18dca0f0dbd37da2b9e1c04d2026fada6125ee7bfc086708a : 0xc4709734FeAafb57F2CB4c3537F2dfB721f5E3DA
Keccak-256: 12qwaszx : 53652a8bf2e5daa4e38965cb1474f651a62cfd01cdd23d9ca3c64d97fd3a4165 : 0xC5989f90f41c2F4dF71076680A597432136bC10d
Keccak-256: 2 : ad7c5bef027816a800da1736444fb58a807ef4c9603b7848673f7e3a68eb14a5 : 0xDCEceAF3fc5C0a63d195d69b1A90011B7B19650D
Keccak-256: 8 : e4b1702d9298fee62dfeccc57d322a463ad55ca201256d01f62b45b2e1c21c10 : 0xe0FC04FA2d34a66B779fd5CEe748268032a146c0
Keccak-256: 14 : 5c4c6aa067b6f8e6cb38e6ab843832a94d1712d661a04d73c517d6a1931a9e5d : 0x00c40FE2095423509B9fd9B754323158Af2310f3
Keccak-256: 123 : 64e604787cbf194841e7b68d7cd28786f6c9a0a3ab9f8b0a0e87cb4387ab0107 : 0xF46b6B9C7cB552829C1D3dFd8FFb11aaBaE782F6
SHA-256: 935 : b064bdba191139689139124101c1c39926326a9b221bd8dfcd603f065c3dc3b8 : 0xc4704D90cE139d919903ABFD8519F6D393c01B4C
SHA-256: 1870 : cf085574d40ec95878b1c306a9b2432d86c05f888edc87a39708000b3e58b5f9 : 0x3e371363C6B77c0819817bFeb8C98D6A4dbc9efE

SHA-256 of an "empty string" e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 : 0x41aD2bc63A2059f9b623533d87fe99887D794847

I didn't check txids of either Ethereum or Bitcoin if they've been used as private keys, didn't check token addresses, contracts, and I only used Bitcoin addresses that currently have some BTC in them, not every address ever used, so there still might be some addresses to be found.

Needless to say, there's nothing in these addresses any more.
Lionheart001
Jr. Member
*
Offline Offline

Activity: 55
Merit: 0

What goes around comes around


View Profile
July 18, 2018, 09:01:34 AM
 #72

This is mind boggling, thought provoking and quite an eye opening piece. The author is simply genius and those folks exploiting this are geniuses too. Wished I know how to code, I will be a white hacker like this dude right here.  Grin

★ PRiVCY ➢ Own Your Privacy! ➢ Best privacy crypto-market! ★
✈✈✈[PoW/PoS]✅[Tor]✅[Airdrop]✈✈✈ (https://privcy.io/)
tsmiles
Member
**
Offline Offline

Activity: 121
Merit: 10

Passion brought Us here....


View Profile
July 18, 2018, 09:31:39 AM
 #73

Wow...a good read, so insightful.i learnt something today.
Thanks for sharing on the forum

   ⚡⚡ PRiVCY ⚡⚡   ▂▃▅▆█ ✅ PRiVCY (PRIV) is a new PoW/PoS revolutionary privacy project ● ☞ ✅ Best privacy crypto-market! ● █▆▅▃▂
    Own Your Privacy! ─────────────────║ WebsiteGithub  |  Bitcointalk  |  Twitter  |  Discord  |  Explorer ║─────────────────
   ✯✯✯✯✯                 ✈✈✈[Free Airdrop - Starts 9th June]✅[Tor]✈✈✈ ║───────────║ Wallet ➢ ✓ Windows  |  ✓ macOS  |  ✓ Linux
keychainX
Jr. Member
*
Offline Offline

Activity: 42
Merit: 0

Crypto recovery Service Keychainx.io


View Profile WWW
July 30, 2018, 11:55:55 AM
 #74

Actually they are not all empty... several have "dust" and one did have a transaction just few weeks ago...

Crypto recovery service http://keychainx.io
Pages: « 1 2 3 [4]  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!