BITCOIN SECURITY

[t3xoff]

I'm a security researcher and for the past 45 days i've been researching on bitcoin protocol and how it is secured.
I found that each and every single bitcoin in the universe is in danger cuz i found a critical security flaw in bitcoin protocol that would give me infinity private keys and all that private keys work.

I have some questions,
1. Who maintains and develop bitcoin and its technology? (I think bitcoin.org)
2. Can the developer modify the bitcoin protocol?
3. To whom can I report this security flaw? (I'm always white hat)
4. Do they give me bounty?

[1714678250]

1714678250

[1714678250]

1714678250

[TryNinja]

You're late, my friend.

The flaw was already found out and it's out there. Unfortunately, devs don't care.

Proof: https://keys.lol/bitcoin/1

[t3xoff]

You're late, my friend.

The flaw was already found out and it's out there. Unfortunately, devs don't care.

Proof: https://keys.lol/bitcoin/1

I knew it before, but what I found is something different.

[t3xoff]

You're late, my friend.

The flaw was already found out and it's out there. Unfortunately, devs don't care.

Proof: https://keys.lol/bitcoin/1

Why don't devs give attention to it, why people are investing in bitcoin, hackers can just take it all?

[TryNinja]

Why don't devs give attention to it, why people are investing in bitcoin, hackers can just take it all?

Yes, of course. All you have to do is find my private key on the list. I wish you luck.



No... my post was a joke. It doesn't matter if you can generate 2^256 private-keys (and of course you can generate as many as you want). The thing is that it would take billions and billions of years before you could find the private key of a funded address.

[pooya87]

Sign a message from one of keys from "every single bitcoin" that is "in danger" or provide a valid transaction to prove you found "a critical security flaw" before wasting precious time of a developer or anyone else for that matter.
Here are two candidates:
bc1qgdjqv0av3q56jvd82tkdjpy7gdp9ut8tlqmgrpmv24sq90ecnvqqjwvw97
1LdRcdxfbSnmCYYNdeYpUnztiYzVfBEQeC

[Jercyhora2]

You're late, my friend.

The flaw was already found out and it's out there. Unfortunately, devs don't care.

Proof: https://keys.lol/bitcoin/1

That site is awesome! I try wasting my 5mins of searching funded wallets. It's hard to find anything! LOL

[t3xoff]

Why don't devs give attention to it, why people are investing in bitcoin, hackers can just take it all?

Yes, of course. All you have to do is find my private key on the list. I wish you luck.



No... my post was a joke. It doesn't matter if you can generate 2^256 private-keys (and of course you can generate as many as you want). The thing is that it would take billions and billions of years before you could find the private key of a funded address.

I got 61 hits out of 83103..........

[Jercyhora2]

Why don't devs give attention to it, why people are investing in bitcoin, hackers can just take it all?

Yes, of course. All you have to do is find my private key on the list. I wish you luck.



No... my post was a joke. It doesn't matter if you can generate 2^256 private-keys (and of course you can generate as many as you want). The thing is that it would take billions and billions of years before you could find the private key of a funded address.

I got 61 hits out of 83103..........

If I were you, if you really make money through that. I'd rather just hide that. You will earn a lot just in case.

[t3xoff]

Why don't devs give attention to it, why people are investing in bitcoin, hackers can just take it all?

Yes, of course. All you have to do is find my private key on the list. I wish you luck.



No... my post was a joke. It doesn't matter if you can generate 2^256 private-keys (and of course you can generate as many as you want). The thing is that it would take billions and billions of years before you could find the private key of a funded address.

I got 61 hits out of 83103..........

If I were you, if you really make money through that. I'd rather just hide that. You will earn a lot just in case.

The hardest thing is i did not take anything from it.
Seems so dramamtic but it's the truth.

[nc50lc]

Does this have something to do with your "5 million private keys" in this thread: IMPORTING PRIVATE KEY?
If so, I'll just wish you good luck with that  d(-_<o)

[DaveF]

Unless OP actually find weakness on RNG which used to generate private key on specific wallet software.

Yes, someone who has no idea how to find / contact people on github.

Or

How to google search the various discussions of importing / checking massive numbers or private keys [side note I actually had to do that once due to poor programming on someone's part]

and is a new user here who came out of nowhere.

Found a vulnerability that nobody else has.

Sure.....

-Dave

[Lucius]

I got 61 hits out of 83103..........

You are obviously very bored in life, and you are not very intelligent as you want to present yourself here. Do you think that you can only impress someone with your statement without any solid data? Show us proof or find a forum with less intelligent people who believe in fairy tales.

4. Do they give me bounty?

Of course, you just need to sign up on any link on this board

[BlackHatCoiner]

Have you studied how things work in cryptography? Or just in Bitcoin? You've registered recently and you keep trying to find a way to cheat the system. Cheating the system isn't as easy as it seems. It's way harder than you thing and infeasible if each user was cautious enough.

I found that each and every single bitcoin in the universe is in danger cuz i found a critical security flaw in bitcoin protocol that would give me infinity private keys and all that private keys work.

This isn't a nice wording. First off, you'll have to define us what you mean by saying “infinity”. Infinite different keys? If yes, then that's impossible, because there's a specific number of available private keys.

Specifically, you cannot pick a number outside the following range as a private key:

[1, 115792089237316195423570985008687907852837564279074904382605163141518161494336]

1. Who maintains and develop bitcoin and its technology?

You're probably referring to the developers. They don't maintain Bitcoin; this task is being managed collectively by the network. They're the ones who contribute by coding.

Here they are: https://github.com/bitcoin/bitcoin/graphs/contributors

2. Can the developer modify the bitcoin protocol?

Anyone can.

3. To whom can I report this security flaw? (I'm always white hat)

To whoever you report it, if it's indeed a security flaw, we'll all gonna learn it.

[t3xoff]

Have you studied how things work in cryptography? Or just in Bitcoin? You've registered recently and you keep trying to find a way to cheat the system. Cheating the system isn't as easy as it seems. It's way harder than you thing and infeasible if each user was cautious enough.

I found that each and every single bitcoin in the universe is in danger cuz i found a critical security flaw in bitcoin protocol that would give me infinity private keys and all that private keys work.

This isn't a nice wording. First off, you'll have to define us what you mean by saying “infinity”. Infinite different keys? If yes, then that's impossible, because there's a specific number of available private keys.

Specifically, you cannot pick a number outside the following range as a private key:

[1, 115792089237316195423570985008687907852837564279074904382605163141518161494336]

1. Who maintains and develop bitcoin and its technology?

You're probably referring to the developers. They don't maintain Bitcoin; this task is being managed collectively by the network. They're the ones who contribute by coding.

Here they are: https://github.com/bitcoin/bitcoin/graphs/contributors

2. Can the developer modify the bitcoin protocol?

Anyone can.

3. To whom can I report this security flaw? (I'm always white hat)

To whoever you report it, if it's indeed a security flaw, we'll all gonna learn it.

yeah I cant really understand it gives 9x99x99999999x999x9x99x9x99999x9999x99x9x99 and it's your wish you can get as much you want.
I too have same question, If I generate much keys would all be valid.
But when i tested some thousands all are valid.
I just manualy operate my tool, still I did not automate it.
The reason I'm not showing any proofs is because i don't want my project leaked.
I'm just a noob in cryptography, not a legend.

[o_e_l_e_o]

If I generate much keys would all be valid.
But when i tested some thousands all are valid.

This is not a weakness and you have not found some big security flaw. This is exactly how bitcoin is supposed to work.

Anyone in the world can generate thousands of even millions of valid private keys if they want. It's as simple as starting at 1 and counting up. Pick any number between the two numbers in BlackHatCoiner's reply, and you have found a valid private key. The reason you can't find anyone else's coins is because of the sheer size of that second number. Even if every computer on the planet did nothing but grind private keys for the rest of time, the sun would die and humans would be extinct before you found a collision.

[stompix]

The reason I'm not showing any proofs is because i don't want my project leaked.

Well, you just leaked it all by yourself.

I too have same question, If I generate much keys would all be valid.
But when i tested some thousands all are valid.
I just manualy operate my tool, still I did not automate it.
~
I got 61 hits out of 83103.......... Grin

So, joining this info with the one in the other topic, I have a wild guess what you're doing, you've found that there are some people stupid enough to use a brainwallet, like the "correct horse battery staple" generated a ton of addresses based on random heavily used passwords, and now because you've ended up with a million addresses you don't have a clue if they have ever been used or have funds on them you're trying to import them to see if they have a balance? 

[BitMaxz]

If I were you don't waste your time you can't find any private keys with funds there are many people who already did that.

You are just likely the same as the users in the past I couldn't remember the name but he claimed that he found a security hole on Bitcoin and then he made a website that all private keys are listed and leaked but I couldn't find my wallet from the list that he said leaked.

It is like the same as these sites
- https://www.bitcoinlist.io/
- https://privatekeys.pw/
- https://allprivatekeys.com/allprivatekeys.php

I just couldn't remember the exact site but he keeps updating it here on the forum.

However, it doesn't prove anything that there is a security hole on Bitcoin until now he never found a private key with funds.

[t3xoff]

If I generate much keys would all be valid.
But when i tested some thousands all are valid.

This is not a weakness and you have not found some big security flaw. This is exactly how bitcoin is supposed to work.

Anyone in the world can generate thousands of even millions of valid private keys if they want. It's as simple as starting at 1 and counting up. Pick any number between the two numbers in BlackHatCoiner's reply, and you have found a valid private key. The reason you can't find anyone else's coins is because of the sheer size of that second number. Even if every computer on the planet did nothing but grind private keys for the rest of time, the sun would die and humans would be extinct before you found a collision.

I dont generate those kind of keys, I generate keys on the basis on vulnebrity i did not generate some unknown keys.
I generate keys which is dependent on a vulnebrity, so it gives me more accuracy.
So it don't take years to get keys with balance.

[DaveF]

I dont generate those kind of keys, I generate keys on the basis on vulnebrity i did not generate some unknown keys.
I generate keys which is dependent on a vulnebrity, so it gives me more accuracy.
So it don't take years to get keys with balance.

Its not "years" to find keys / addresses with a balance. It's 10s of millions of years to find them.

According to your other post you already found over 60 keys.
Prove a few of them by signing a message or just go away, other then providing some entertainment for us to poke fun of you being an idiot, there is no other reason to be here.

This forum is not hostile to new users, but idiots like yourself who spout garbage are going to be flamed till you leave or stop spouting BS.

-Dave