[WARNING] Sol Noctis Bull Coin Keys Compromised / Scam

[PreciousMetapsICT]

Anybody have any with holograms intact for sale?? Man those are beautiful coins and holos. Looking for a bull and an eagle -  not too worried about the load value myself or being able to redeem it as the value is small... I just love the design

[1714549155]

1714549155

[minerjones]

EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.

It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.

Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:

Code:

const crypto = require('crypto');
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');

let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);

I've swept the key, please provide an address to which you'd like to receive your funds.

Can someone help.. I have 3 of these and do not know how to run this code.
Please PM me if you can help

[DaveF]

I sent MJ a PM about this but since he asked I figure others might need it too.
I don't have a Sol Noctis Bull to test / check so I am using the information from the post about it.

THERE MAY BE SECURITY RISKS HERE SO MOVE YOUR COINS ASAP.

Step 1: Open up a web browser and 2 private tabs.

Step 1a: In tab #1 go to https://appdevtools.com/base58-encoder-decoder
Step 1b: In tab #2 to https://www.bitaddress.org

Step 2: DISCONNECT FROM THE INTERNET

Step 3: Verify that you are offline

Step 4: Verify offline again. Or not, it's your money.

Step 5: On the https://appdevtools.com/base58-encoder-decoder tab click on decode and treat output as HEX and put in the info from the coin
You can see it gives the same info as MJ quoted above. (Converts EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 to ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a)



Step 6: Go to the bitaddress.org tab and click on Wallet Details and put in the output HEX (ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a) where it says enter private key and then click view details. You should get the same info and the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a



NOTE I DID NOT TEST THIS WITH ANYTHING OTHER THEN WHAT WAS PRESENTED BY cwil BACK IN 2020
So if the info he gave was wrong then I just followed and got the same wrong answer. If anyone can verify that it works for them then others would have a somewhat simple way of getting their funds off of these things.

-Dave

[minerjones]

Thanks DaveF

Worked for all 3 coins.

FYI: All 3 were the Sol Noctis EAGLE 0.01 coins. So this does apply to both the Eagle coins and Bull coins

[Cryptogreatdane]

Can i get a 5th grade explanation for whats happening here?

[DaveF]

Can i get a 5th grade explanation for whats happening here?

Some, possibly all, of these coins have had their keys compromised.
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.

As to why they used a non standard format, who knows.

-Dave

[minerjones]

Can i get a 5th grade explanation for whats happening here?

Some, possibly all, of these coins have had their keys compromised
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.

As to why they used a non standard format, who knows.

-Dave

Compromised is not correct term.... that would indicate something happened such as the sweeping of funds.

They were "improperly formated"

[DaveF]

Can i get a 5th grade explanation for whats happening here?

Some, possibly all, of these coins have had their keys compromised
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.

As to why they used a non standard format, who knows.

-Dave

Compromised is not correct term.... that would indicate something happened such as the sweeping of funds.

They were "improperly formated"

Yes, improperly formatted is a better then compromised. Had a brain freeze this AM and was trying to come up a one or two word way of saying:
They did not create or print the keys in any of the standard ways that people use for giving us BTC addresses for use in collectables.

Side comment, after the yogg thing and the other issues with collectables, makes you wonder if we do go to some hardware way of securing them if things like this are going to be an issue. So a decade later (yes I know this was only a few years) instead of jumping though some software hoops we are searching on ebay for a obsolete NFC reader or something.

-Dave

[Kryptowerk]

Can i get a 5th grade explanation for whats happening here?

Some, possibly all, of these coins have had their keys compromised
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.

As to why they used a non standard format, who knows.

-Dave

Compromised is not correct term.... that would indicate something happened such as the sweeping of funds.

They were "improperly formated"

Thanks to you both for sharing this method of converting to "normal" private keys.
I was also confused regarding *compromised* - so glad to hear they are not (yet  )  - not sure if I do remember correctly, though, some of the newer ones (the 0.001 denominated bulls) had issues with the private keys readablility when peeled. Can anyone confirm / negate this?

[owlcatz]

I checked this code out on chatGPT and it gave me the following so if you have VS 2022 you should be able to get it working:

https://chat.openai.com/share/d2134341-25da-4437-a2f1-db9d26d8175d

Note I have not tried it yet, as I have no interest in peeling coins right now, but it should work, I just did not have time to test as I had to repair my VS2022 install for whatever stupid MS reason lol.

[polymerbit]

So if I understood correctly, at the time it was considered a scam because people couldn't redeem?

Or are the keys at risk of being compromised (even if they haven't as of yet)?

[DaveF]

So if I understood correctly, at the time it was considered a scam because people couldn't redeem?

Or are the keys at risk of being compromised (even if they haven't as of yet)?

There have been a couple of issues.

1) You needed to jump thought hoops to redeem some coins.
2) If you read this entire thread something funky DID happen with at least 1 coin.

So make your own conclusions from there.
I think it is just sloppy work in general from them and not the worlds best customer service attitude.

-Dave

[ChiBitCTy]

So if I understood correctly, at the time it was considered a scam because people couldn't redeem?

Or are the keys at risk of being compromised (even if they haven't as of yet)?

There have been a couple of issues.

1) You needed to jump thought hoops to redeem some coins.
2) If you read this entire thread something funky DID happen with at least 1 coin.

So make your own conclusions from there.
I think it is just sloppy work in general from them and not the worlds best customer service attitude.

-Dave

The breakdown -

Someone came here and said something to the effect of “holy shit my Sol Noctis Bull coin had btc funds moved off of it and I never peeled”. Coin was sent to LesbianCow who , and I’m a little fussy here but , basically confirmed that in fact the coin was truly never peeled. What’s craziest of all is the coins were moved them shortly after (not sure on exact length, maybe few days at most I believe) were sent back. LesbianCow spoke with the sellers/creators (PowerCoin I believe) who asked he send the coin to them. He did so. PC essentially brushed it under the rug and provided no legitimate response to the whole situation, ever.

So, yea, Sol Noctis Bull Coins, should be considered compromised. Someone obviously stored the keys, or at the very least one private key, which we all know one is all it takes for trust.

Apparently for coin one, the owl, they used someone else for key generation. Imo they should not be trusted either, as the seller is incompetent or part of the issue/compromise/potential future rug pull.

I refuse to buy any product for them as they were super shady about that whole thing. I remember they posted one of the Bull coins for either auction or raffle on instagram. I chimed in about the situation and my comment was deleted, later the post was.

This is all from memory, I will double check for story inaccuracies which I know for a fact if any are minimal and this is indeed exactly what transpired.

My opinion- having done a lot of scam researching in this space, I believe the absolutely ridiculous redemption process was done so on purpose. Why? I think they don’t want people redeeming them. There were SEVERAL Mr Robots around here who couldn’t figure out how to redeem these coins (Yogg and satoshighost I believe had tried but were also confused), and while one of these two is a scammer themselves (Yogg, of course), they are both highly technical programmers. This last part again, is my opinion.

Edit - “ top world coin” NOT power coin. My apologies.

[Kryptowerk]

Thanks for the info, ChiBi.
Sucks to hear it but the more people know about it the better. If LC and you confirm this incident Sol Noctis coins can be considered compromised indeed. - For that reason would appreciate if you can check the story and report back here then.
In any case, enjoy a great Sunday evening!

[Kryptowerk]

Cloud flare double post, will delete after 24h.

[DaveF]

.....
Edit - “ top world coin” NOT power coin. My apologies.

Do you have the links to this. Did a bit of searching and my Monday AM google powers seem to be lacking. And I did not see them in the Breached / Scam makers list:
https://bitcointalk.org/index.php?topic=3315347.0


Back to this, the other issue beyond all of these things is that with the larger places you don't always know who is involved.
When Yogg went evil, we knew who it was and what happened.
When Gravitate went evil we knew who it was and what happened.

With things like this, since it was a larger organization, they might have had the best intentions but 1 bad employee messed it up for everyone.
Not saying that the company is not at fault, it's their coin and their problem, just that the more people involved the more likely it's going to be a problem.

It's even happened to people here who had others help them, they knew what they were doing but the partner did not and bad things happened.

-Dave

[krogothmanhattan]

.....
Edit - “ top world coin” NOT power coin. My apologies.

Do you have the links to this. Did a bit of searching and my Monday AM google powers seem to be lacking. And I did not see them in the Breached / Scam makers list:
https://bitcointalk.org/index.php?topic=3315347.0


Back to this, the other issue beyond all of these things is that with the larger places you don't always know who is involved.
When Yogg went evil, we knew who it was and what happened.
When Gravitate went evil we knew who it was and what happened.

With things like this, since it was a larger organization, they might have had the best intentions but 1 bad employee messed it up for everyone.
Not saying that the company is not at fault, it's their coin and their problem, just that the more people involved the more likely it's going to be a problem.

It's even happened to people here who had others help them, they knew what they were doing but the partner did not and bad things happened.

-Dave

     Dave....yes they are on the list...look at the OP below the Hyperion Coin scam and above the SHITKEY scam and you will see they have been posted there all along.

   Its a shame as I liked these coin designs....but it is what it is....they are scammers!

     

[krogothmanhattan]

It's even happened to people here who had others help them, they knew what they were doing but the partner did not and bad things happened.

-Dave

     Yes it has....and that's why as a coin maker I was the only one making private keys and I will be held fully responsible should the ever come where anything is breached...not that it will by the way.

      I  have been offered to make coins with others but have turned down the opportunity as I don't want to have two people involved with generating any keys.

[DaveF]

.....
Edit - “ top world coin” NOT power coin. My apologies.

Do you have the links to this. Did a bit of searching and my Monday AM google powers seem to be lacking. And I did not see them in the Breached / Scam makers list:
https://bitcointalk.org/index.php?topic=3315347.0


Back to this, the other issue beyond all of these things is that with the larger places you don't always know who is involved.
When Yogg went evil, we knew who it was and what happened.
When Gravitate went evil we knew who it was and what happened.

With things like this, since it was a larger organization, they might have had the best intentions but 1 bad employee messed it up for everyone.
Not saying that the company is not at fault, it's their coin and their problem, just that the more people involved the more likely it's going to be a problem.

It's even happened to people here who had others help them, they knew what they were doing but the partner did not and bad things happened.

-Dave

     Dave....yes they are on the list...look at the OP below the Hyperion Coin scam and above the SHITKEY scam and you will see they have been posted there all along.

   Its a shame as I liked these coin designs....but it is what it is....they are scammers! 

I 100% misread what he posted I thought top world coin was another scammer not the makers of these coins.
<sigh>
Kind of sad that when you see something you don't immediately recognize you go looking for 'what scam was that' instead of actually looking.
Guess we are all kind of waiting to see who goes evil next.

-Dave

[ChiBitCTy]

Has anyone redeemed a Sol Noctis Eagle before, and if so, is the redemption process the same as the Bull? (Basically I’m asking if it’s as insane of a “process” as the Bull is).

Any and all help/knowledge is appreciated!