Bitcoin Puzzle - Can You Derive the Wallet from the Genesis Block?I came across an interesting Bitcoin puzzle that appears to challenge participants to derive a Bitcoin wallet using information contained in the Bitcoin Genesis Block.
The puzzle begins with two messages embedded in Bitcoin transactions via OP_RETURN. I have included screenshots of both original messages below.
The first message says:
“I made a Bitcoin puzzle using information contained in the genesis block created by Satoshi to generate the wallet. The entropy is extremely low. I didn't even need to back anything up. Everything I needed was already in the genesis block. Good luck!”https://talkimg.com/images/2026/09/29/U09mlf.pngThe second message says:
“If you have a question, you can include it with a transaction sent directly to this address, and I will reply with a hint. Larger payments receive better hints. Dust transactions will be ignored.”https://talkimg.com/images/2026/09/29/U09P6Z.pngThe puzzle appears to use a 2-of-2 P2WSH multisig wallet.
What has been revealed so farFrom subsequent interactions and OP_RETURN messages, the following clues have been established:
- The wallet is a 2-of-2 multisig.
- There are two independently derived keys.
- Both keys use some field from the Bitcoin Genesis Block.
- The derivation involves BIP32, BIP39 and BIP48.
- The derivation path is described as: root → multisig → mainnet → genesis_data → script_type
- root is derived from a BIP39 mnemonic.
- The mnemonic contains 12 words.
- The BIP39 entropy is 128 bits.
- The entropy is apparently derived from a 128-bit digest.
- More specifically, the clue indicates that it is the first 128 bits of SHA-256 applied to an “entropy” value from the Genesis Block.
- The input is a contiguous piece of the Genesis Block, copied exactly as displayed by a standard tool.
- Four possible representations have been suggested: binary, hexadecimal, decimal and ASCII.
- The BIP39 passphrase is apparently a name.
- The clue for the name is: “Who received the first transaction?”
The puzzle is associated with the following P2WSH address:
bc1qfkhx02v89u2qyyyljeczw6hu9sr437y44t7ae5yf09thrdukfqesnjg2wjThe puzzle appears to have been deliberately designed so that the information needed to reconstruct the wallet is already present in the Bitcoin Genesis Block.
The main question is:
can we determine the exact Genesis Block field or data used to generate the BIP39 entropy, and reproduce the resulting multisig address?Any ideas, scripts, or independent derivations would be very welcome.
BTC
