Bitcoin puzzle (3,350.00 BTC's )

[bytcoin]

Edited!
I apologize to everyone!
I did almost everything "manually" is susceptible to errors
Two valid signatures with the same private key, but the nonce k of the second signature is half of the first. (Nonce k of the second signature: k1 / 2 = k2)

The second nonce k2 is half of the nonce k1 of the first signature

In decimal

Signature 1:

Nonce k1
r = 385570073629551546729230374184391439442417095537024350206131291065055332733
s = 76130260662571134678372154009160868461537800596554110575850229341703072615102
h = 42268864623620244998249895290537358742158169262361846431272029622156081203721



Signature 2:

Nonce k2 (k1 / 2 = k2)
r = 79948557280043978274449002532600374620672215928697101734828211284733327158664
s = 56368220214898939855776145385640746541620815395185097101215290078962069907292
h = 87726031595873281985439431891132599611815665254308710544703498112157039462043




Address: https://bitinfocharts.com/bitcoin/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx




Public key : 040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d


Is not difficult! An equation solves this. I will respond to comments only after the address has been drained.
Good luck!
Great song while trying to solve this puzzle

https://i.imgur.com/THooBoC.png[/img]]https://www.youtube.com/watch?v=HWjCStB6k4o

[1713553379]

1713553379

[1713553379]

1713553379

[AB de Royse777]

1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

It would be great if you are able to sign a message using this address. Use current date in the message like "Today is 03/03/2021 and I (bytcoin) own this address".

If you can't then most possibly you are wasting everyone's time here.

[dothebeats]

1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

It would be great if you are able to sign a message using this address. Use current date in the message like "Today is 03/03/2021 and I (bytcoin) own this address".

If you can't then most possibly you are wasting everyone's time here.

Yup, just so people wouldn't go on and solve this straight away thinking that they would get the btc only to find out that there isn't any coins to be had in the first place.

Not that we're trying to say that you're a fraud or anything but just to make sure that you really have the funds. Most puzzles here in bitcointalk went smoothly just because the one who gave the puzzle signed a message on the address they're trying to give away.

[BurtW]

Yes, as we have all told you before:

If there is a known mathematical relationship between the two nonce used (k₁ = k₀ + n OR k₁ = m * k₀) then you can derive the private key from the two signatures.

This is why the k value is picked at random (hopefully from a secure random number generator).

The key phrase here is "known mathematical relationship between the two nonce"

We have shown you the math for this - several times.  You should be able to do the math yourself at this point.

What does the address 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx have to do with anything?

Are you really claiming to know that there are two signatures in the block chain using the private key for 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx that were constructed with k₁ = 2 * k₀?

How would you know this?

[bytcoin]

Before someone appears saying that the signatures do not exist and are not real ...
https://www.blockchain.com/btc/tx/d95d58461f2d3fd476db49a741944ced4383a548937bb107d8897ea6053aeda8


And it also checks the validity of the second signature

[COBRAS]

I did almost everything 'manually' and from what I checked it was all right
Please read carefully! It has two signatures with the same private key, with the nonce k of the second signature being double the k1 (nonce signature 1: k1) (nonce signature 2: k1 * 2 = k2)
A linear equation solves this
If someone finds something wrong please post in the comments

why your second P is differert from first P ?

[BurtW]

If you have two valid signatures using the same private key where k' = 2k then:

From each message we can derive the z value (hash of the message) so:

First message and signature (m, r, s, z)
Second message and signature (m', r', s', z')

Therefore:  ks = z + rd_A and k's' = z' + r'd_A

Therefore:  (sk - z)/r = (s'k' - z')/r'

But in this case k' = 2k so:

(sk - z)/r = (2s'k - z')/r'

So all you have to do is solve for k.  All the other values:  s, z, r, s', z', and r' are all known.

rr'(sk - z)/r = rr'(2s'k - z')/r'

r'(sk - z) = r(2s'k - z')

r'sk - r'z = 2rs'k - rz'

r'sk - r'z +rz' = 2rs'k

k = (r'sk - r'z +rz')/2rs'

Once you know k you can simply calculate the private key, d_A = (sk - z)/r

I still do not see what your two signatures have to do with the BTC at 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

These two things:  how to solve for the private key when you know k' = 2k and the BTC stored at 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx seem to be unrelated, right?

[bytcoin]

@BurtW Once again I apologize!
The correct is:
(Nonce k2 of the second signature: k1 / 2 = k2)
That would be too easy! The order between s and h of the second signature is alternated ... You just need an efficient equation ... and the private key is all yours. Anyone who can calculate will own the 3,500.00 BTCs
You don't need to post formulas or equations here, just calculate and get the private key for yourself.
All the information needed to find the private key has already been exposed

[COBRAS]

I get two variats, they are not valid.

0x81cdc964a3ed34ef41ff52b1e0962a794c0b5e8143dce2b927cb6cb2af6c8439

0xe773cf35fce567d0622203c28f67478a3361bae7e6eb4366b50e1d27eb1ed82e

I go to sleep now. Tomorrow continue work if adress was not empty.

But, Buddy, this adress has many input and output transaction, so, get R,S,Z for this adress is not so HARD, and you ca get it with 2xcoin.com

BR

[pooya87]

(Nonce k2 of the second signature: k1 / 2 = k2)
Anyone who can calculate will own the 3,500.00 BTCs

You are very confused.
There is no such relationship between the two ks used in the 2 signatures in the 2 transactions that were sent out of 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx, I checked. If there were the coins would have been stolen a very long time ago.

[j2002ba2]

Before someone appears saying that the signatures do not exist and are not real ...
https://www.blockchain.com/btc/tx/d95d58461f2d3fd476db49a741944ced4383a548937bb107d8897ea6053aeda8


And it also checks the validity of the second signature

It doesn't. The second R & S differs.

Yours are:
r2: b0c147a4046a541d051fa5f17906bc01aeb46fbe273ef9226610d2e0579dad88
s2: 7c9f48333e7ad71c9fc66c28efaa4032954bba147feb8f08664e3fce4619a75c

The signature from 523c3a9aa8f69af7a5b0491eeb4e49be3fb20ca5e5b0a9114e0bbdf273c1a690:
3044022070aee9c959607de56c500a2aefeaed489aab151daf42299df564106367c296e10220755799de9564d2968ceac7f8a3678d1d7b47e41fadb24ba6c694fc11eae6bcc901
040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d

Didn't bother to check the hashes provided.

[100bitcoin]

Address: https://bitinfocharts.com/bitcoin/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx




Public key : 040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d


Is not difficult! An equation solves this. I will respond to comments only after the address has been drained.
Good luck!

First and foremost, provide a signature of the following quoted message, which is verifiable at https://tools.bitcoin.com/verify-message/ or https://reinproject.org/bitcoin-signature-tool/#verify or https://tools.qz.sg/

Today is 03/03/2021 and I (bytcoin) own this address

[COBRAS]

Address: https://bitinfocharts.com/bitcoin/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx




Public key : 040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d


Is not difficult! An equation solves this. I will respond to comments only after the address has been drained.
Good luck!

First and foremost, provide a signature of the following quoted message, which is verifiable at https://tools.bitcoin.com/verify-message/ or https://reinproject.org/bitcoin-signature-tool/#verify or https://tools.qz.sg/

Today is 03/03/2021 and I (bytcoin) own this address

Hi. And what is a message in btx transaction

[anunta90]

@BurtW Once again I apologize!
The correct is:
(Nonce k2 of the second signature: k1 / 2 = k2)
That would be too easy! The order between s and h of the second signature is alternated ... You just need an efficient equation ... and the private key is all yours. Anyone who can calculate will own the 3,500.00 BTCs
You don't need to post formulas or equations here, just calculate and get the private key for yourself.
All the information needed to find the private key has already been exposed

Good morning thanks for the puzzle I have a question ...are there s2 and h2 correct values? sorry for asking but After recalculating all the values the only one I am getting wrong  is h2

[AGD]

Address: https://bitinfocharts.com/bitcoin/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx




Public key : 040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d


Is not difficult! An equation solves this. I will respond to comments only after the address has been drained.
Good luck!

First and foremost, provide a signature of the following quoted message, which is verifiable at https://tools.bitcoin.com/verify-message/ or https://reinproject.org/bitcoin-signature-tool/#verify or https://tools.qz.sg/

Today is 03/03/2021 and I (bytcoin) own this address

Not possible because OP is not the owner of 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

[COBRAS]

Address: https://bitinfocharts.com/bitcoin/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx




Public key : 040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d


Is not difficult! An equation solves this. I will respond to comments only after the address has been drained.
Good luck!

First and foremost, provide a signature of the following quoted message, which is verifiable at https://tools.bitcoin.com/verify-message/ or https://reinproject.org/bitcoin-signature-tool/#verify or https://tools.qz.sg/

Today is 03/03/2021 and I (bytcoin) own this address

Not possible because OP is not the owner of 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

Relay hash of signet message not in tx ?

[bytcoin]

When did I say I have the private key? Where did I say I have the private key for the address: 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx
Even if I had the private key, I would have no obligation to sign anything for anyone!
I am not forcing anyone to comment or participate in this thread. Please do not disturb anyone who is trying to solve this puzzle. If you think this is crazy or without logic ... there are other puzzles for you "" BITCOIN PUZZLE TRANSACTION 32 BTC "is one of the best ... Go try it.

LET'S GO TO WHAT REALLY INTERESTED!!!

Address:1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

Information obtained from these two great sites indicates that 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx still has more than 3,350.00BTCs of balance

https://www.blockchain.com/btc/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx
https://bitinfocharts.com/bitcoin/address/1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

And they also inform that the public key of the address 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx is:
040b8a0382802e12fc345e9bace8b99f6aed6b90fbfd796e8027ca9bb5f472778db863952bdb6e9 e399e34f941cab2fa6c244e65af2d15244fee2d795b3f6e222d

Blockchain is a site known and respected by virtually the entire bitcoin community

Address, balance, public key and signature are information I obtained through Blockchain and Bitinfocharts

Signature 1:
3045022000da3994e2e3127562c5c5985905aee8adcab095c868ce42642707ffc006497d022100a 850335707cbe5956068f1244f4a96f5fd1c2df073b5fe6a87362c97693b8abe01



I used two great online HEX to DEC converters

https://www.rapidtables.com/convert/number/hex-to-decimal.html
https://www.browserling.com/tools/hex-to-dec

Converting signature and public key to decimal ...

Signature 1:
r = 385570073629551546729230374184391439442417095537024350206131291065055332733
s = 76130260662571134678372154009160868461537800596554110575850229341703072615102

Public key:
x = 5219290452886381554846642120655814292700488812830998433969278473683499906957
y = 83401511541326351499427602363312724708661860852249629118671517030652656362029

Now check if the signature is valid and belongs to this public key

h/s = 28517235349398423630439789541652069713005057721301369068264419707208655905336
r/s = 65598992890922652707901950886500083639932983506688873809736866885385723932245

G*28517235349398423630439789541652069713005057721301369068264419707208655905336

Public key * 65598992890922652707901950886500083639932983506688873809736866885385723932245

The full verification has already been done here for you...



Rx = Signature fully valid and belongs to the address 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx

I think now no one has any doubts about the first signature?

Signature 2:
The methods are practically the same as the first, the difference is that I created this signature with the nonce k being the half of the nonce k of the first signature
And to find out if the nonce k2 is really half of the nonce k1 ... A simple multiplication of points will tell you
The second signature was verified in the same way as the first



If the signature verification method remains the same and the information on this site is correct:
Blockchain
Bitinfocharts
RapidTables
Browserling
 
Here we have two signatures with the same private key, the nonce k2 being half of the nonce k of the first signature.
SECOND SIGNATURE NONCE K (K1 / 2 = K2)
English is not my language, I hope everyone has understood
This thread can help you find some method that finds k or private key of the address 1FvUkW8thcqG6HP7gAvAjcR52fR7CYodBx
https://bitcointalk.org/index.php?topic=5317743.0
Constructive criticism is welcome ... To think that this is crazy you have this right, but please do not disturb the people who are trying to help. If someone is feeling uncomfortable or just wants to troll ... there are thousands of other thread on Bitcointalk.

[albert0bsd]

why your second P is differert from first P ?

I think that the different P point is the previous point but halving if you see its the same n value, so the only way to get (K1 / 2 = K2) , is halving N or halving the point.

the challenge look interesting at my first try i get 0/0 so i need to check my math.

Signature 2:
The methods are practically the same as the first, the difference is that I created this signature with the nonce k being the half of the nonce k of the first signature
And to find out if the nonce k2 is really half of the nonce k1 ... A simple multiplication of points will tell you
The second signature was verified in the same way as the first

I perform a signature validation with your Nonce values r,s,h of K2 and yes your Signature is valid enough to know the K2 value, that signature is not public that is why some people get confused.

The formula to calculate a signature validatarion is in the next link: https://cryptobook.nakov.com/digital-signatures/ecdsa-sign-verify-messages#ecdsa-sign

BTW here is the relevant text:

The algorithm to verify a ECDSA signature takes as input the signed message msg + the signature {r, s} produced from the signing algorithm + the public key pubKey, corresponding to the signer's private key. The output is boolean value: valid or invalid signature. The ECDSA signature verify algorithm works as follows (with minor simplifications):

• Calculate the message hash, with the same cryptographic hash function used during the signing: h = hash(msg)
• Calculate the modular inverse of the signature proof: s1 =
• Recover the random point used during the signing: R' = (h * s1) * G + (r * s1) * pubKey
• Take from R' its x-coordinate: r' = R'.x
• Calculate the signature validation result by comparing whether r' == r

The general idea of the signature verification is to recover the point R' using the public key and check whether it is same point R, generated randomly during the signing process.

The R' Point calculated is (b0c147a4046a541d051fa5f17906bc01aeb46fbe273ef9226610d2e0579dad88, 9ad7d585e8252cd19e6364203cfb29ac1962390b6b8122da679b53c37963316e)

Only one question, is solvable?

I get some 0 value while i was working with the ecuations i get some values like:

r1*z2 - r2*z1 = 0

Best regards

Edit is not solvable because the OP crafted the signature from a previous one.

is the same signature because:

2*r2*s1 % n = 4d27b04d19bb13563dc45d9d768a13f53f02970024759081601c4bd59aba5f76
r1*s2 % n = 4d27b04d19bb13563dc45d9d768a13f53f02970024759081601c4bd59aba5f76

and

r2*z1 % n = 3d6319695748c424ef2a249456c3a198a6ea34933ba345a8118703ef82d28977
r1*z2 % n = 3d6319695748c424ef2a249456c3a198a6ea34933ba345a8118703ef82d28977

both sides of the equation get canceled like 0=k1*0 or k1= 0/0....

Don't waste your time with this user anymore

[pooya87]

anyone who is trying to solve this puzzle.

There is no puzzles to be solved here. You asked a question last month and nobody answered, so you tried again by selecting a random address with a big balance and pretending it is "vulnerable" and you succeeded since someone did reply with a solution.

Now by continuing to insist this is a puzzle and there is a known relationship between the two ks in those two signatures (while there clearly isn't any) you are just trolling.

[SUPERMANULTRA]

so this means none won this yet?? Maybe I am gonna get it to some university professor and let's see if he can calculate it
.