Bitcoin Forum
May 23, 2024, 04:37:42 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 2 [3] 4 5 6 7 »  All
  Print  
Author Topic: [WARNING] Sol Noctis Bull Coin Keys Compromised / Scam  (Read 4022 times)
anonymousminer
Legendary
*
Offline Offline

Activity: 1428
Merit: 1242



View Profile
March 17, 2020, 01:08:40 AM
 #41

Man that is some BULL, I hope this isn't true somehow.

Yeah for some reason I am not convinced it's the eagles... or the bulls (yet) for that matter. Time will tell.
The bulls certainly have an issue.... nobody has been able to sweep one.  The private key is some 44 character garbage.

Doesn't a 44 character private key correspond to a private key Base64?
please give it a shot:

public key: 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a
private key under hologram: EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9
snarfbag (OP)
Copper Member
Member
**
Offline Offline

Activity: 100
Merit: 18


View Profile
March 17, 2020, 01:35:41 AM
 #42

Here's the actual peeled key from my Bull:

cwil
Sr. Member
****
Offline Offline

Activity: 285
Merit: 259


View Profile
March 17, 2020, 04:39:12 AM
Merited by krogothmanhattan (11), Mitchell (10), yogg (10), LoyceV (8), suchmoon (7), ChiBitCTy (5), teeGUMES (3), philipma1957 (2), Heisenberg_Hunter (2), Evilish (2), transvestite lamb (2), owlcatz (1), 2stout (1), tweetious (1), frankenmint (1), anonymousminer (1), Spazzer (1), Edits (1), Crypto_Collection (1)
 #43

EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.

It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.

Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:

Code:
const crypto = require('crypto');
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');

let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);

I've swept the key, please provide an address to which you'd like to receive your funds.
Edits
Member
**
Offline Offline

Activity: 366
Merit: 29


View Profile
March 17, 2020, 05:00:07 AM
 #44

Jinkies, hes cracked it!

Good work cwil.
teeGUMES
Legendary
*
Offline Offline

Activity: 1253
Merit: 1203


View Profile
March 17, 2020, 09:55:07 AM
 #45

One mystery solved. Great work cwil. Hopefully this code is easy enough for someone to host somewhere and we can have our own sol noctis bull redeemer page.
tweetious
Sr. Member
****
Offline Offline

Activity: 1959
Merit: 375


Cryptoshi Blockomoto


View Profile
March 17, 2020, 10:14:35 AM
 #46

Thank you cwil ! great work, really appreciated!  Smiley
snarfbag (OP)
Copper Member
Member
**
Offline Offline

Activity: 100
Merit: 18


View Profile
March 17, 2020, 03:10:22 PM
 #47

I've swept the key, please provide an address to which you'd like to receive your funds.

Please keep it, it's yours! That is some good work to crack their code. I would not have figured that out. Sweeping my Eagle coin was so simple in comparison.
guigui371
Legendary
*
Offline Offline

Activity: 2114
Merit: 1693

C.D.P.E.M


View Profile
March 17, 2020, 07:53:51 PM
 #48

I purchased several Binary Bulls last year and gave them out as gifts. One particular coin, I loaded with extra Bitcoin to total 0.015 BTC and gave it to a family member. I just noticed it was swept on Feb 20th, and replaced with 0.001 BTC about 5 minutes later in a separate transaction.

https://www.blockchain.com/btc/address/1Lh975rtt1RwDJ1SHGX8mn1iHwe7kaVfMQ

Has this mystery been solved yet?

It looks like the corrupted private keys have found a solution (congrats ciwil).

And I was talking to @yogg over the phone and he will also code a script to convert the private key back to the normal format (with the covid19 he is some extra free time on his hand  Grin )


it ain't much but it's honest work
Lesbian Cow
Legendary
*
Offline Offline

Activity: 2982
Merit: 1752



View Profile
March 17, 2020, 08:14:06 PM
 #49

I purchased several Binary Bulls last year and gave them out as gifts. One particular coin, I loaded with extra Bitcoin to total 0.015 BTC and gave it to a family member. I just noticed it was swept on Feb 20th, and replaced with 0.001 BTC about 5 minutes later in a separate transaction.

https://www.blockchain.com/btc/address/1Lh975rtt1RwDJ1SHGX8mn1iHwe7kaVfMQ

Has this mystery been solved yet?

It looks like the corrupted private keys have found a solution (congrats ciwil).

And I was talking to @yogg over the phone and he will also code a script to convert the private key back to the normal format (with the covid19 he is some extra free time on his hand  Grin )



I completed the purchase of this coin from snarfbag just today due to my travels and it should be on its way to me shortly.  Once I have it I will look to Top World Coins for some answers.  I will update on this thread as I have more information.

To err is human, to moo is bovine

https://www.instagram.com/lesbiancow212/
krogothmanhattan
Cypher Hodl LLC
Legendary
*
Offline Offline

Activity: 2534
Merit: 3269


The Stone the masons rejected was the cornerstone.


View Profile WWW
March 17, 2020, 10:48:57 PM
 #50

Response from topworldcoins...after i linked this thread and explained issue...so the last email.

Hello,

We are responsible for the coins we sell to our buyers and issues with our coins. For others, we can't help, because we don't know how it was purchased.

Kind regards,
Helen

█████████████████████████
████▐██▄█████████████████
████▐██████▄▄▄███████████
████▐████▄█████▄▄████████
████▐█████▀▀▀▀▀███▄██████
████▐███▀████████████████
████▐█████████▄█████▌████
████▐██▌█████▀██████▌████
████▐██████████▀████▌████
█████▀███▄█████▄███▀█████
███████▀█████████▀███████
██████████▀███▀██████████
█████████████████████████
.
BC.GAME
▄▄░░░▄▀▀▄████████
▄▄▄
██████████████
█████░░▄▄▄▄████████
▄▄▄▄▄▄▄▄▄██▄██████▄▄▄▄████
▄███▄█▄▄██████████▄████▄████
███████████████████████████▀███
▀████▄██▄██▄░░░░▄████████████
▀▀▀█████▄▄▄███████████▀██
███████████████████▀██
███████████████████▄██
▄███████████████████▄██
█████████████████████▀██
██████████████████████▄
.
..CASINO....SPORTS....RACING..
█░░░░░░█░░░░░░█
▀███▀░░▀███▀░░▀███▀
▀░▀░░░░▀░▀░░░░▀░▀
░░░░░░░░░░░░
▀██████████
░░░░░███░░░░
░░█░░░███▄█░░░
░░██▌░░███░▀░░██▌
░█░██░░███░░░█░██
░█▀▀▀█▌░███░░█▀▀▀█▌
▄█▄░░░██▄███▄█▄░░▄██▄
▄███▄
░░░░▀██▄▀


▄▄████▄▄
▄███▀▀███▄
██████████
▀███▄░▄██▀
▄▄████▄▄░▀█▀▄██▀▄▄████▄▄
▄███▀▀▀████▄▄██▀▄███▀▀███▄
███████▄▄▀▀████▄▄▀▀███████
▀███▄▄███▀░░░▀▀████▄▄▄███▀
▀▀████▀▀████████▀▀████▀▀
guigui371
Legendary
*
Offline Offline

Activity: 2114
Merit: 1693

C.D.P.E.M


View Profile
March 17, 2020, 11:30:56 PM
 #51

Response from topworldcoins...after i linked this thread and explained issue...so the last email.

Hello,

We are responsible for the coins we sell to our buyers and issues with our coins. For others, we can't help, because we don't know how it was purchased.

Kind regards,
Helen

Not a very good PR

imagine the following answer from Ford :
"we are only responsible for the car we sell directly to our clients. For Ford car owners that didn't purchase brand new from us we can't help (even if we fucker up as a car manufacturer) because we don't know how it was purchased"

just my 2 cents


it ain't much but it's honest work
Edits
Member
**
Offline Offline

Activity: 366
Merit: 29


View Profile
March 18, 2020, 09:20:28 AM
Merited by guigui371 (1)
 #52

Response from topworldcoins...after i linked this thread and explained issue...so the last email.

Hello,

We are responsible for the coins we sell to our buyers and issues with our coins. For others, we can't help, because we don't know how it was purchased.

Kind regards,
Helen

Not a very good PR

imagine the following answer from Ford :
"we are only responsible for the car we sell directly to our clients. For Ford car owners that didn't purchase brand new from us we can't help (even if we fucker up as a car manufacturer) because we don't know how it was purchased"

just my 2 cents



Good analogy guigui. Takata comes to mind. this was my email/response on the 16th:

Hello,
Please, let us know your order number that we can find it on our website.
Kind regards,
Helen

    Hi,
    Please respond to this thread on bitcointalk.org
    https://bitcointalk.org/index.php?topic=5231305.0
    It is becoming apparent there may be issues with the key generation of the Binary Bulls
    Specifically how to sweep this key.
    public key: 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a
    private key under hologram: EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9
    Any explanation will help put the collecting community at ease.

    Thanks.
TheNewAnon135246
Legendary
*
Offline Offline

Activity: 2198
Merit: 1989


฿uy ฿itcoin


View Profile
March 18, 2020, 10:22:36 PM
 #53

Seeing these posts reminds me why I love physical bitcoins and its community.
guigui371
Legendary
*
Offline Offline

Activity: 2114
Merit: 1693

C.D.P.E.M


View Profile
March 29, 2020, 09:26:52 PM
 #54

Bump,
Any update ?

it ain't much but it's honest work
elmejorrematador
Member
**
Offline Offline

Activity: 107
Merit: 15


View Profile
March 30, 2020, 09:43:30 AM
 #55

Hey guys, what happened to the overage that was sent to that coin? did i miss the explanation? Where did the extra btc go that he sent to that coin?

snarfbag (OP)
Copper Member
Member
**
Offline Offline

Activity: 100
Merit: 18


View Profile
March 30, 2020, 12:11:19 PM
 #56

Bump,
Any update ?

The coin was shipped to Lesbian Cow and arrived per the tracking number. I haven't heard anything else.

Hey guys, what happened to the overage that was sent to that coin? did i miss the explanation? Where did the extra btc go that he sent to that coin?

The extra funds are still sitting in an address the coin creator swept them into on 2/20/20 and haven't moved since.
Lesbian Cow
Legendary
*
Offline Offline

Activity: 2982
Merit: 1752



View Profile
March 30, 2020, 01:34:35 PM
Merited by andulolika (1), guigui371 (1)
 #57

Bump,
Any update ?

The coin was shipped to Lesbian Cow and arrived per the tracking number. I haven't heard anything else.

Hey guys, what happened to the overage that was sent to that coin? did i miss the explanation? Where did the extra btc go that he sent to that coin?

The extra funds are still sitting in an address the coin creator swept them into on 2/20/20 and haven't moved since.

Hello all,

I have the coin in question and have contacted Top World Coins which is where I originally purchased quite a few of them.  Due to travel and real life business issues occupying my time I did not contact TWC until this weekend just past.  That said, I woke up this morning with a reply from them.  They seem genuinely concerned and are looking into their key generation/funding process.  I have checked all the Sol Nocti I have and they remain funded, I would appreciate it if anyone with a Sol Noctis could check their funding and report back to me.

I will update here when I have more information from TWC.

Cheers!

To err is human, to moo is bovine

https://www.instagram.com/lesbiancow212/
krogoth
Full Member
***
Offline Offline

Activity: 1220
Merit: 138


Krogothmanhattan alt account


View Profile WWW
April 11, 2020, 05:48:01 PM
 #58

Any further information on this?

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>CIPHER BILLS-CIPHER BONDS-CIPHER STAMPS * www.CYPHERHODL.com * COLD STORAGE BITCOIN CERTIFICATES <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
DaveF
Legendary
*
Offline Offline

Activity: 3486
Merit: 6308


Crypto Swap Exchange


View Profile WWW
April 11, 2020, 10:43:39 PM
 #59

Everyone has been silent as far as I can tell.
The funding on mine is fine, sorry for not reporting. And I assume the code that cwil posted above will work if I ever have to clam it.

With that being said, this is why I have posted a few times about the issues with loaded coins.

Stay safe.

-Dave




█▀▀▀











█▄▄▄
▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄
█████████████
████████████▄███
██▐███████▄█████▀
█████████▄████▀
███▐████▄███▀
████▐██████▀
█████▀█████
███████████▄
████████████▄
██▄█████▀█████▄
▄█████████▀█████▀
███████████▀██▀
████▀█████████
▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄
▀▀▀█











▄▄▄█
▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
▀██▀▀
lebnor
Member
**
Offline Offline

Activity: 494
Merit: 12


View Profile
April 11, 2020, 11:46:02 PM
 #60

EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.

It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.

Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:

Code:
const crypto = require('crypto');
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');

let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);

I've swept the key, please provide an address to which you'd like to receive your funds.
I appreciate this cwil.
Pages: « 1 2 [3] 4 5 6 7 »  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!