[WARNING] SATRESCUE.APP - Dangerous BTC Recovery Tool

[albon]

What happened:: This account has the tag "This user recently woke up from a long period of inactivity", made its first post on November 01, 2026.

The topic was about a tool called [Tool] Recover BTC stuck as "unavailable balance" in Ordinals/Runes wallets (non-custodial)..



I checked the tool and I found a Bitcoin address in the code: bc1qhn047jlj79zwrtk6h54eeyqn9czprghnkdm3m9. It takes a 17% cut from the recovered amount.

[ARCHIVED]

The biggest risk is the Burn Mode option in the code, and it targets all confirmed UTXOs in the wallet meaning it could spend all the user's BTC with their Inscriptions and Runes.

The code also has a referral program that gives 30% of the service fees to referrers.

The website asks users to connect their wallets and sign a PSBT using signPsbt(). The signed transaction is then broadcast using pushPsbt() , the risk is because the script can target all confirmed UTXOs in the wallet which could let it allow the user's entire BTC balance to be spent.

Profile Link: https://bitcointalk.org/index.php?action=profile;u=897586 | FLAG

Reference Link:
[1] https://bitcointalk.org/index.php?topic=5598589.0 | https://bitcointalk.org/index.php?topic=5598603.0
[2] SATRESCUE.APP | WHOIS | ARCHIVED
[3] github.com/OculusMans/sat-rescue

Domain: satrescue.app
Registered On: 2026-11-01
Expires On: 2027-11-01
Updated On: 2026-11-01
Age: 2 Days

Additional Notes: The domain was registered on November 01, 2026, the same day the member published his first topic on the forum.

After I left negative trust feedback based on the risks found in the tool, the member sent me a private message containing personal insults instead of discussing the findings.

I have attached a screenshot of his message:


This member's account previously had two negative trust ratings from 2020 for using multiple accounts to cheat.

SPQRCoin

2020-09-23

Reference

Multiple accounts owner, cheating on multiple bounty campaigns at the same time. Connected accounts: OculusMan, cacucacok91, CHE}|{OK, BitmarkInvest, BadboyBTC, Emin, BTCGirl, Toropen, Maryshka91, Dim4ik, DahonPao, Nazarov, Myra4, Garryk, Do4a

diks

2020-09-23

Reference

connected to multiple accounts

[albon]

Update:

The domain is now on to the blocklist after I reported it to MetaMask's GitHub.

A warning message now appears when someone tries to open the website.



They opened an appeal in issue #308671 to have the domain removed from the blocklist. The issue was later closed as "not planned" by a MetaMask maintainer.

Also, they opened issue #309013 and admitted that the part about inscriptions and runes had been fixed, but Burn Mode can still use regular UTXOs from the user's wallet, not just dust, and this means users could send more BTC than they wanted, or even all the BTC in their wallets.

They also did not answer questions about the hardcoded Bitcoin fee address, the 17% fee and why referrers receive 30% of that fee.

So, the MetaMask maintainer AlexHerman1 closed their latest issue as "not planned" and replied:

"Please stop reopening these. Users are free to bypass the warning to use your site."

[hugeblack]

One of the topics was deleted, but I could not find it in ----> https://bitcointalk.org/modlog.php; it may have been removed due to spam or low quality.
I believe that everything mentioned poses high risks, so please create a "flag," and we will support it.

[albon]

One of the topics was deleted, but I could not find it in ----> https://bitcointalk.org/modlog.php; it may have been removed due to spam or low quality.
I believe that everything mentioned poses high risks, so please create a "flag," and we will support it.

Yes, the topic created in the Russian section and written in Russian has been deleted.

However, I don't know why the other topic posted by this member in the Services section hasn't been deleted, even though clear evidence was provided in that topic.

Anyway, I left negative trust on the account of the member who promoted this tool and his account now has -3 trust ratings.

Following your advice, I have also created a flag against this member --> https://bitcointalk.org/index.php?action=trust;flag=3608 [It is up to each person to decide whether to support or oppose it based on the risks they believe this tool poses.]

I will also report this domain to the registrar and ask them to take it down as soon as possible.

[Pikiboy]

One of the topics was deleted, but I could not find it in ----> https://bitcointalk.org/modlog.php; it may have been removed due to spam or low quality.
I believe that everything mentioned poses high risks, so please create a "flag," and we will support it.

You have a very nice suggestion, when a flag is created it will create enough awareness regarding that user and people will definitely avoid the user including with the site he is promoting.


It's actually dangerous to see an account that wasn't active for a long time and just woke up a day and started promoting sites that will scam people around. Again, all could check if that profile has also changed hand.

Whenever an account like this comes up and began some activities that are not usually found on the account then it will be assumed that profile has changed hands.

[albon]

It's actually dangerous to see an account that wasn't active for a long time and just woke up a day and started promoting sites that will scam people around. Again, all could check if that profile has also changed hand.

Whenever an account like this comes up and began some activities that are not usually found on the account then it will be assumed that profile has changed hands.

True. These accounts are risky, as they have been inactive for years and they may have been sold/hacked.

I've caught many such accounts that suddenly became active and started promoting scam sites. .

Members here should be careful with topics created by these accounts. They should check their trust feedback and previous posts before trusting them.. Also check if the account has changed its writing style or started posting in other local boards compared to past.

[hugeblack]

Following your advice, I have also created a flag against this member --> https://bitcointalk.org/index.php?action=trust;flag=3608 [It is up to each person to decide whether to support or oppose it based on the risks they believe this tool poses.]

flag has been supported.

Whenever an account like this comes up and began some activities that are not usually found on the account then it will be assumed that profile has changed hands.

Often, these are purchased accounts which are sold for nominal sums to be used for low-cost scam activities, fake bump ANNs, or similar tasks. with the owners fully aware that such use will ultimately result in the account accruing further negative reputation or being banned.

[Toropen]

What happened:: This account has the tag "This user recently woke up from a long period of inactivity", made its first post on November 01, 2026.

The topic was about a tool called [Tool] Recover BTC stuck as "unavailable balance" in Ordinals/Runes wallets (non-custodial)..



I checked the tool and I found a Bitcoin address in the code: bc1qhn047jlj79zwrtk6h54eeyqn9czprghnkdm3m9. It takes a 17% cut from the recovered amount.

[ARCHIVED]

The biggest risk is the Burn Mode option in the code, and it targets all confirmed UTXOs in the wallet meaning it could spend all the user's BTC with their Inscriptions and Runes.

The code also has a referral program that gives 30% of the service fees to referrers.

The website asks users to connect their wallets and sign a PSBT using signPsbt(). The signed transaction is then broadcast using pushPsbt() , the risk is because the script can target all confirmed UTXOs in the wallet which could let it allow the user's entire BTC balance to be spent.

Profile Link: https://bitcointalk.org/index.php?action=profile;u=897586 | FLAG

Reference Link:
[1] https://bitcointalk.org/index.php?topic=5598589.0 | https://bitcointalk.org/index.php?topic=5598603.0
[2] SATRESCUE.APP | WHOIS | ARCHIVED
[3] github.com/OculusMans/sat-rescue

Domain: satrescue.app
Registered On: 2026-11-01
Expires On: 2027-11-01
Updated On: 2026-11-01
Age: 2 Days

Additional Notes: The domain was registered on November 01, 2026, the same day the member published his first topic on the forum.

After I left negative trust feedback based on the risks found in the tool, the member sent me a private message containing personal insults instead of discussing the findings.

I have attached a screenshot of his message:


This member's account previously had two negative trust ratings from 2020 for using multiple accounts to cheat.

SPQRCoin

2020-09-23

Reference

Multiple accounts owner, cheating on multiple bounty campaigns at the same time. Connected accounts: OculusMan, cacucacok91, CHE}|{OK, BitmarkInvest, BadboyBTC, Emin, BTCGirl, Toropen, Maryshka91, Dim4ik, DahonPao, Nazarov, Myra4, Garryk, Do4a

diks

2020-09-23

Reference

connected to multiple accounts

I have to write from my old profile because Albon complained to Mom, and I can’t write from the main one for another 7 days.

It’s hilarious watching forum moral crusaders who shill shady casino ref links in their signatures for pennies suddenly act like the Holy Inquisition. Are you guys seriously trying to lecture anyone about honesty?

Let’s go through the actual facts, assuming you’re even capable of processing them:

1. Regarding the hacked account: A profile being inactive for a while is completely normal for people who actually build things instead of sitting on this forum 24/7 waiting for hand-outs. Inactivity proves absolutely nothing except your own appetite for conspiracy theories.

2. Regarding the fee and scam accusations: What scam? My goal was never to deceive anyone or steal user funds. The service charges a 17% fee for actual technical execution and automating the recovery of stuck assets. This fee is stated openly on the site, alongside clear warnings for users holding valuable assets like runes or inscriptions. The code is 100% open-source and transparent read it yourself. But it’s obviously easier for you to scream scam because you aren’t used to seeing honest commercial work where someone actually earns their keep instead of begging for ref-link crumbs.

3. Regarding your reputation : Your trust flags and red tags are nothing more than a joke to me. Sitting in a swamp that’s rotten to the core, listening to the whining of local rats who can't even read open-source code or grasp basic logic, is hardly something I take seriously.

You’re just a bunch of forum parasites living off referral scrap, accustomed to nothing but barking from the sidelines without the brainpower to review a basic codebase.

[albon]

I have to write from my old profile because Albon complained to Mom, and I can’t write from the main one for another 7 days.

It’s hilarious watching forum moral crusaders who shill shady casino ref links in their signatures for pennies suddenly act like the Holy Inquisition. Are you guys seriously trying to lecture anyone about honesty?

Let’s go through the actual facts, assuming you’re even capable of processing them:

1. Regarding the hacked account: A profile being inactive for a while is completely normal for people who actually build things instead of sitting on this forum 24/7 waiting for hand-outs. Inactivity proves absolutely nothing except your own appetite for conspiracy theories.

2. Regarding the fee and scam accusations: What scam? My goal was never to deceive anyone or steal user funds. The service charges a 17% fee for actual technical execution and automating the recovery of stuck assets. This fee is stated openly on the site, alongside clear warnings for users holding valuable assets like runes or inscriptions. The code is 100% open-source and transparent read it yourself. But it’s obviously easier for you to scream scam because you aren’t used to seeing honest commercial work where someone actually earns their keep instead of begging for ref-link crumbs.

3. Regarding your reputation : Your trust flags and red tags are nothing more than a joke to me. Sitting in a swamp that’s rotten to the core, listening to the whining of local rats who can't even read open-source code or grasp basic logic, is hardly something I take seriously.

You’re just a bunch of forum parasites living off referral scrap, accustomed to nothing but barking from the sidelines without the brainpower to review a basic codebase.

We waited all this time for answers, but instead, you spent most of your reply insulting me.

1- How can you talk about honesty when the account mentioned in the OP, OculusMan, along with this account and your alt accounts has negative trust for cheating bounty campaigns? You also admit that you're posting from this account because your main account is banned and can't post for another 7 days.

2- You keep calling your service transparent because it's open source, but you still haven't answered these questions.

3. Why doesn't Burn Mode use only dust instead of regular UTXOs from the wallet?

4. How exactly is the 17% fee deducted, and why is there a fixed Bitcoin fee address hardcoded in the source code?

5. Why do referral partners get 30% of the fee?

6. You said you fixed the Inscriptions and Runes issue in your latest GitHub update, but what about the remaining risk of spending users' regular BTC, possibly even their entire wallet balance? That issue still hasn't been addressed.



7. You opened two issues with MetaMask, and they closed #308671 and #309013 as not planned, asking you to stop reopening them. Yet you came back again and told them that you wanted to reach an agreement to remove the warning. it looks like your only concern is getting the MetaMask warning removed from your website without any intention of fixing the risks that led to this warning.



So instead of insulting others, why don't you answer these questions?

[Toropen]

I have to write from my old profile because Albon complained to Mom, and I can’t write from the main one for another 7 days.

It’s hilarious watching forum moral crusaders who shill shady casino ref links in their signatures for pennies suddenly act like the Holy Inquisition. Are you guys seriously trying to lecture anyone about honesty?

Let’s go through the actual facts, assuming you’re even capable of processing them:

1. Regarding the hacked account: A profile being inactive for a while is completely normal for people who actually build things instead of sitting on this forum 24/7 waiting for hand-outs. Inactivity proves absolutely nothing except your own appetite for conspiracy theories.

2. Regarding the fee and scam accusations: What scam? My goal was never to deceive anyone or steal user funds. The service charges a 17% fee for actual technical execution and automating the recovery of stuck assets. This fee is stated openly on the site, alongside clear warnings for users holding valuable assets like runes or inscriptions. The code is 100% open-source and transparent read it yourself. But it’s obviously easier for you to scream scam because you aren’t used to seeing honest commercial work where someone actually earns their keep instead of begging for ref-link crumbs.

3. Regarding your reputation : Your trust flags and red tags are nothing more than a joke to me. Sitting in a swamp that’s rotten to the core, listening to the whining of local rats who can't even read open-source code or grasp basic logic, is hardly something I take seriously.

You’re just a bunch of forum parasites living off referral scrap, accustomed to nothing but barking from the sidelines without the brainpower to review a basic codebase.

We waited all this time for answers, but instead, you spent most of your reply insulting me.

1- How can you talk about honesty when the account mentioned in the OP, OculusMan, along with this account and your alt accounts has negative trust for cheating bounty campaigns? You also admit that you're posting from this account because your main account is banned and can't post for another 7 days.

2- You keep calling your service transparent because it's open source, but you still haven't answered these questions.

3. Why doesn't Burn Mode use only dust instead of regular UTXOs from the wallet?

4. How exactly is the 17% fee deducted, and why is there a fixed Bitcoin fee address hardcoded in the source code?

5. Why do referral partners get 30% of the fee?

6. You said you fixed the Inscriptions and Runes issue in your latest GitHub update, but what about the remaining risk of spending users' regular BTC, possibly even their entire wallet balance? That issue still hasn't been addressed.



7. You opened two issues with MetaMask, and they closed #308671 and #309013 as not planned, asking you to stop reopening them. Yet you came back again and told them that you wanted to reach an agreement to remove the warning. it looks like your only concern is getting the MetaMask warning removed from your website without any intention of fixing the risks that led to this warning.



So instead of insulting others, why don't you answer these questions?

With casino referral links plastered right in your signatures, you lose any moral high ground to even open your mouth on this topic. Let's flip the script and ask you a real question instead: how can someone with your status justify shilling gambling dens where the house edge guarantees people lose their shirts? No casino on earth exists to make anyone rich-they are engineered strictly to strip ordinary people of their cash. So by what right do you, suddenly pretending to be a champion of justice, cash in on ruining everyday users?

[The Cryptovator]

So far I can see he is trying to promote recovery services for specific problems, not for a wallet recovery service. But waking up after a long time and trying to promote an unknown service isn’t welcome here. Unless it’s tested by the reputed users here, it won’t be welcomed on the forum.

The problems described on the advertisement thread I am not familiar with. But I will discourage users here from using that service. Rather, there is a trusted recovery service on the forum; you may use that service. Thanks, OP, for bringing attention to that matter. It looks suspicious to me whether the codes are open source or not.

[Toropen]

So far I can see he is trying to promote recovery services for specific problems, not for a wallet recovery service. But waking up after a long time and trying to promote an unknown service isn’t welcome here. Unless it’s tested by the reputed users here, it won’t be welcomed on the forum.

The problems described on the advertisement thread I am not familiar with. But I will discourage users here from using that service. Rather, there is a trusted recovery service on the forum; you may use that service. Thanks, OP, for bringing attention to that matter. It looks suspicious to me whether the codes are open source or not.

Another message just to advertise a casino?
Why are you writing a message if you don’t understand the essence of the service and can’t adequately analyze what I offered?

This service doesn’t restore a wallet; it only unlocks BTC that are stuck in junk inscriptions and runes.

Secondly, it’s obvious that you haven’t read either the code or the previous messages at all. The source code is fully open and available on GitHub.

You’re not doing a good job with your bowl of rice. We need to file a complaint about poor‑quality messages.

[albon]

With casino referral links plastered right in your signatures, you lose any moral high ground to even open your mouth on this topic. Let's flip the script and ask you a real question instead: how can someone with your status justify shilling gambling dens where the house edge guarantees people lose their shirts? No casino on earth exists to make anyone rich-they are engineered strictly to strip ordinary people of their cash. So by what right do you, suddenly pretending to be a champion of justice, cash in on ruining everyday users?

You also posted the same personal attacks from another one of your accounts --> @Noizebtc, before deleting the post and posted the same thing here [ARCHIVED].



What you wrote now is a very weak excuse to avoid answering these questions. My signature has nothing to do with the security of your service which you keep claiming is transparent without showing any proof that your service is actually safe..

So let me quote my questions again and get back to the point..

1- How can you talk about honesty when the account mentioned in the OP, OculusMan, along with this account and your alt accounts has negative trust for cheating bounty campaigns? You also admit that you're posting from this account because your main account is banned and can't post for another 7 days.

2- You keep calling your service transparent because it's open source, but you still haven't answered these questions.

3. Why doesn't Burn Mode use only dust instead of regular UTXOs from the wallet?

4. How exactly is the 17% fee deducted, and why is there a fixed Bitcoin fee address hardcoded in the source code?

5. Why do referral partners get 30% of the fee?

6. You said you fixed the Inscriptions and Runes issue in your latest GitHub update, but what about the remaining risk of spending users' regular BTC, possibly even their entire wallet balance? That issue still hasn't been addressed.

7. You opened two issues with MetaMask, and they closed #308671 and #309013 as not planned, asking you to stop reopening them. Yet you came back again and told them that you wanted to reach an agreement to remove the warning. it looks like your only concern is getting the MetaMask warning removed from your website without any intention of fixing the risks that led to this warning.

You keep talking about open-source code. Then answer the questions instead of attacking the people asking them.