12-word recovery phrase - LOST. 2k who can help

[dovjann]

Hello,

I have used Atomic Wallet on my laptop, unfortunately I did not saved my 12-word recovery phrase. (Yes I am dumb). My laptop crashed suddenly and I had to do a reinstall of windows. I have not used this wallet for a while until one person sent me a lot of money, even I had new wallet..

1) I used laptop 3-4 weeks after reinstallation so recover data is probably poor chance, plus I use SSD, not HDD, so I probably overwritten the data already.

2) As I researched I believe the only chance is Check mnemonics to get 12 phrase recovery?:

There are 2048 words https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt

I need to recover my 12 phrase recovery, I know my wallet address, but I can not remember any word that was in my 12 phrase recovery.

You look up the word's index in the dictionary I linked above to convert it to a binary number, then you run the BIP39 algorithm, which converts a number to a private key, then you use that private key to generate the address (https://www.freecodecamp.org/news/how-to-create-a-bitcoin-wallet-address-from-a-private-key-eca3ddd9c05f/) and compare that to the known address.

Practically: you just have to run the specialized software. Either Hashcat (hashcat.net), or this https://github.com/johncantrell97/bip39-solver-gpu

The hashcat command will probably look like this:
hashcat -a 3 -m 11300 wallet.dat

I need that a company or someone that knows who has super computer like google has it, to recover my 12 phrase recovery..

Let me know your thoughts, possibilities or any other ideas, I know the password of my wallet btw.. Transactions.. Wallet Address..

Who can help me, I will honor 2k$ ..


Thank you.

[big_daddy]

I'm sorry for your lost bro, that's all I can say

One more example of how important is to keep your keys

Edit:
After windows crashed, you could run a linux distribution live (cd/usb) or even connect the ssd to a PC running on linux and get all your wallet data out
If you had a clean installation, I'm afraid you've lost all data, but you can still try to do that above and take a deep scan of your appdata files, maybe there is some

good luck

[OmegaStarScream]

It's impossible to recover your 12 words seed if you don't know most of its words.

Your only chance would be to try and recover the wallet file and decrypt it.

[dovjann]

It's impossible to recover your 12 words seed if you don't know most of its words.

Your only chance would be to try and recover the wallet file and decrypt it.

You mean recover the wallet folder I had before reinstalling windows?

[NeuroticFish]

1) I used laptop 3-4 weeks after reinstallation so recover data is probably poor chance, plus I use SSD, not HDD, so I probably overwritten the data already.

So you have absolutely nothing from the old wallet, no seed, no backup, nothing?
What wallet.dat you actually want to "crack" if you don't have the old one?
Do you understand that if finding the private key (or seed if you want) for a random address would work, no address would be safe and Bitcoin would have been long dead?

I hope that I've misunderstood something. And sorry for your loss...

[OmegaStarScream]

You mean recover the wallet folder I had before reinstalling windows?

Yes, the appData folder should contain the wallet file. I believe this is the file (icudtl.dat) that contains the private keys for your wallet:



I suggest you first reach out to Atomic wallet support, and confirm whether the file I mentioned is the correct one or not and then you can try to recover it, you probably won't need to recover the whole folder.

[dovjann]

1) I used laptop 3-4 weeks after reinstallation so recover data is probably poor chance, plus I use SSD, not HDD, so I probably overwritten the data already.

So you have absolutely nothing from the old wallet, no seed, no backup, nothing?
What wallet.dat you actually want to "crack" if you don't have the old one?
Do you understand that if finding the private key (or seed if you want) for a random address would work, no address would be safe and Bitcoin would have been long dead?

I hope that I've misunderstood something. And sorry for your loss...

hey:

https://medium.com/@johncantrell97/how-i-checked-over-1-trillion-mnemonics-in-30-hours-to-win-a-bitcoin-635fe051a752

[Lucius]

dovjann, if you don't have at least part of the seed, a public BTC address won't help you - because if it was so easy to hack a private key, Bitcoin would have been a thing of the past long time ago. Your best chance is to find a wallet file from Atomic Wallet, and since you've probably compromised old data by using your computer for 3-4 weeks, the only thing I can recommend is to try to find a Windows.old folder that should contain that file.

Restore an individual file
If you need to recover individual files from your old Windows installation, you can recover them from the Windows.old folder. You can access the Windows.old folder at C:\Windows.old, and browsing your file system. Your personal files will be located under C:\Windows.old\Users\your_name.
Open the folders that contain the files you want to retrieve.
Copy and paste the files that you want.
Be attention, Windows.old folder will be deleted automatically by Windows to free up space after 30 days. If you want to break the 30 days limits, you can backup Windows.old folder to another location.

[OmegaStarScream]

I've done some more tests to try and locate the wallet file, and I'm almost certain that this is it: (ignore the previous post I made)

Code:

C:\Users\OmegaStarScream\AppData\Roaming\atomic\Local Storage\leveldb\000003.txt

(Same location as in Jaxx wallet)

If you ever manage to recover it, reinstall Atomic wallet and place it on leveldb folder.

[larus]

Super computer time is cost more than 2k as i know

[BASE16]

Brute forcing mnemonics is not going to work simply because then everybody could do it.
In fact, brute forcing mnemonics is the slowest way to get to your coins.
It's way faster to target the address directly, but even then you don't stand a chance and have to rely on pure luck.
The only thing left will depend on how you reinstalled the new operating system and what you did with it afterwards.
If you did a slow format everything will be gone, but if you did a fast format everything that was not overwritten will still be there.

[dovjann]

Brute forcing mnemonics is not going to work simply because then everybody could do it.
In fact, brute forcing mnemonics is the slowest way to get to your coins.
It's way faster to target the address directly, but even then you don't stand a chance and have to rely on pure luck.
The only thing left will depend on how you reinstalled the new operating system and what you did with it afterwards.
If you did a slow format everything will be gone, but if you did a fast format everything that was not overwritten will still be there.

Then how this guy did it then if it's impossible?

https://medium.com/@johncantrell97/how-i-checked-over-1-trillion-mnemonics-in-30-hours-to-win-a-bitcoin-635fe051a752

[NeuroticFish]

Then how this guy did it then if it's impossible?

https://medium.com/@johncantrell97/how-i-checked-over-1-trillion-mnemonics-in-30-hours-to-win-a-bitcoin-635fe051a752

If you read from start you'll see that 8 of the 12 words were known. So he only searched for 4 words.
For each missing word it's exponentially more difficult and you are missing all 12 words.

[dovjann]

I've done some more tests to try and locate the wallet file, and I'm almost certain that this is it: (ignore the previous post I made)

Code:

C:\Users\OmegaStarScream\AppData\Roaming\atomic\Local Storage\leveldb\000003.txt

(Same location as in Jaxx wallet)

If you ever manage to recover it, reinstall Atomic wallet and place it on leveldb folder.

But it's a log tracker? How do you know thi is the file? how did u tested?

[OmegaStarScream]

But it's a log tracker? How do you know thi is the file? how did u tested?

1. Created a new wallet
2. Closed atomic
3. Deleted the file (00003.txt)
4. Reopened Atomic wallet and it's now asking me to create a new one (as if the other one no longer exists).

I don't think I would've got these results if it was a log tracker.

[BASE16]

Brute forcing mnemonics is not going to work simply because then everybody could do it.
In fact, brute forcing mnemonics is the slowest way to get to your coins.
It's way faster to target the address directly, but even then you don't stand a chance and have to rely on pure luck.
The only thing left will depend on how you reinstalled the new operating system and what you did with it afterwards.
If you did a slow format everything will be gone, but if you did a fast format everything that was not overwritten will still be there.

Then how this guy did it then if it's impossible?

https://medium.com/@johncantrell97/how-i-checked-over-1-trillion-mnemonics-in-30-hours-to-win-a-bitcoin-635fe051a752

Maybe you should read the article this was not about 12 unknown words.

Code:

Luckily, we do not need to actually check all 2¹²⁸ possibilities because Alistair was going to release 1 seed word every couple of days. 
Each seed word we collect reduces the possibilities we need to check by a factor of 2¹¹ or 2048.

[Casdinyard]

There are 2048 words https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt

I need to recover my 12 phrase recovery,

If ever that you would try to brute force it by looking up on the wordlists for possible combinations then turn each and every possible combinations to a binary then use BIP39 algorithm to get the private key (which you can still have now or not), you would simply get 2^132 which is 5.4445179e+39

The English wordlist for BIP 39 contains 2048 words, so in order to crack a 12-word phrase it would require figuring out 2048^12 = 2^132 possible combinations under a shield of 128-bit security.

If ever that you can remember even just the mnemonics, you can simply use https://iancoleman.io/bip39/? .


I might try doing this tomorrow just if ever I could crack it. I'll just send you a PM once I'm ready.

[dovjann]

I'm not sure if anyone can help you, but if they do, I'll be surprised.

hope dies last lol

[bob123]

Unfortunately there is no way for you to get your coins back.
The system would be broken if it would be possible to simply bruteforce a seed storing BTC.

Since you already used your SSD and the chances of recovery are indeed extremely low, you are unfortunately out of luck.
Data recovery would be the only option if you are sure that you don't have a backup of your mnemonic code somwhere.

[NotATether]

Actually, when you reinstalled Windows, it may have moved your old data to C:\Windows.old or a similar name. I once did a clean reinstall of Windows and the previous operating system C:\Windows, Users, and Program Files were moved to that folder. Check if you have such a folder. You need to find it fast because Windows is going to delete the whole folder automatically after about a month, and I'm assuming you reinstalled Windows today.

First, reinstall Atomic Wallet, it's going to be a clean state with no wallets imported but it will generate the C:\Users\<user>\AppData\Roaming\atomic. If Atomic Wallet is running then close it. Rename the folder to something else (like atomic2 or atomic3). You can delete this after you copy the folder below and you verify your old wallet is back.

Now navigate inside C:\Windows.old, and go to the path OmegaStarScream wrote:

Code:

C:\Windows.old\Users\<user>\AppData\Roaming\atomic

Copy the entire folder to C:\Users\<user>\AppData\Roaming\ and your old wallet should be there.


Atomic wallet may have also stored stuff in the registry, so if you want to import the registry settings it's using, you can do this:

Copy C:\Windows.old\Users\<user>\NTUSER.DAT and put it in some folder you remember like your Documents folder. This file has all of your registry settings for the current user. If I can find what the registry keys for Atomic wallet are, then you can mount this file on Registry Editor and export the keys to another file, and import them to your current registry at HKEY_CURRENT_USER key.

I don't think this is necessary because I doubt the wallet file is stored in the registry, it should be on the disk.


@OmegaStarScream, do you know if Atomic Wallet makes a folder in AppData\Local too? He might need to copy that along with Roaming.