[WARNING] SATRESCUE.APP - Dangerous BTC Recovery Tool

[albon]

What happened:: This account has the tag "This user recently woke up from a long period of inactivity", made its first post on November 01, 2026.

The topic was about a tool called [Tool] Recover BTC stuck as "unavailable balance" in Ordinals/Runes wallets (non-custodial)..



I checked the tool and I found a Bitcoin address in the code: bc1qhn047jlj79zwrtk6h54eeyqn9czprghnkdm3m9. It takes a 17% cut from the recovered amount.

[ARCHIVED]

The biggest risk is the Burn Mode option in the code, and it targets all confirmed UTXOs in the wallet meaning it could spend all the user's BTC with their Inscriptions and Runes.

The code also has a referral program that gives 30% of the service fees to referrers.

The website asks users to connect their wallets and sign a PSBT using signPsbt(). The signed transaction is then broadcast using pushPsbt() , the risk is because the script can target all confirmed UTXOs in the wallet which could let it allow the user's entire BTC balance to be spent.

Profile Link: https://bitcointalk.org/index.php?action=profile;u=897586

Reference Link:
[1] https://bitcointalk.org/index.php?topic=5598589.0 | https://bitcointalk.org/index.php?topic=5598603.0
[2] SATRESCUE.APP | WHOIS | ARCHIVED
[3] github.com/OculusMans/sat-rescue

Domain: satrescue.app
Registered On: 2026-11-01
Expires On: 2027-11-01
Updated On: 2026-11-01
Age: 2 Days

Additional Notes: The domain was registered on November 01, 2026, the same day the member published his first topic on the forum.

After I left negative trust feedback based on the risks found in the tool, the member sent me a private message containing personal insults instead of discussing the findings.

I have attached a screenshot of his message:


This member's account previously had two negative trust ratings from 2020 for using multiple accounts to cheat.

SPQRCoin

2020-09-23

Reference

Multiple accounts owner, cheating on multiple bounty campaigns at the same time. Connected accounts: OculusMan, cacucacok91, CHE}|{OK, BitmarkInvest, BadboyBTC, Emin, BTCGirl, Toropen, Maryshka91, Dim4ik, DahonPao, Nazarov, Myra4, Garryk, Do4a

diks

2020-09-23

Reference

connected to multiple accounts

[albon]

Update:

The domain is now on to the blocklist after I reported it to MetaMask's GitHub.

A warning message now appears when someone tries to open the website.



They opened an appeal in issue #308671 to have the domain removed from the blocklist. The issue was later closed as "not planned" by a MetaMask maintainer.

Also, they opened issue #309013 and admitted that the part about inscriptions and runes had been fixed, but Burn Mode can still use regular UTXOs from the user's wallet, not just dust, and this means users could send more BTC than they wanted, or even all the BTC in their wallets.

They also did not answer questions about the hardcoded Bitcoin fee address, the 17% fee and why referrers receive 30% of that fee.

So, the MetaMask maintainer AlexHerman1 closed their latest issue as "not planned" and replied:

"Please stop reopening these. Users are free to bypass the warning to use your site."