Pages:
Author

Topic: Collection of 18.509 found and used Brainwallets - page 11. (Read 30938 times)

legendary
Activity: 2268
Merit: 1092
This is for Litecoin, but I thought I'd mention it because of the substantial (~$30,000 USD at the time, more now) amount involved.

http://explorer.litecoin.net/address/LP27QTd7DpQTEyoREubXSY2JhyBPBbiqFa
https://ltc.explorer.berrywallet.io/address/LP27QTd7DpQTEyoREubXSY2JhyBPBbiqFa

Around a year ago, this address was funded with 500 LTC, then a few hours later, 0.99 LTC was added, and a few minutes after that, the entire 500.99 LTC balance was transferred out.

I'm going to withhold the passphrase because of the value and relatively recent transactions, but it's simply someone's name, and from some basic research it seems that he's involved with investing in Litecoin. Some kind of vanity thing, either by the person with that name (side thought: I wonder how many people use their real name as passphrases for their encrypted local wallets?), or someone else trying to make a point? Not a small amount, either way.
legendary
Activity: 2268
Merit: 1092
Code:
cows,0.24308000

cows?  really... cows?

There's several thousand dictionary word brainwallets which were funded with 0.0000546 BTC back in 2013, however, looking more closely, this is not the typical dictionary word brainwallet. There are 30234 transactions associated with this address!!!

https://www.blockchain.com/btc/address/fee56f465d92e6c52a8dd455e4e10cf835554097
legendary
Activity: 2646
Merit: 1129
All paid signature campaigns should be banned.
Code:
cows,0.24308000

cows?  really... cows?
legendary
Activity: 2268
Merit: 1092
I have to agree. It would appear to me that your Brainwallet will be as secure as the passphrase you used to create it. So if you choose a very difficult passphrase your brainwallet will be secure. I would assume it's the same as choosing a passphrase for your encryption vault.

I can think of two very important differences with brainwallets, versus a wallet.dat encrypted by a Bitcoin client:

1. The blockchain is like a public password file that can be passively cracked. If someone cracks your passphrase, they can steal the funds, without ever needing physical or remote access to your machine in order to copy wallet.dat.

2. Brainwallet cracking doesn't need to be targeted. It's only a little less efficient to check each candidate passphrase against the entire set of unspent outputs - every funded address on the blockchain - versus just one specific address.

A basic SHA256(passphrase) brainwallet is very dangerous, because the keys can be checked at a great rate. My ageing Core2Quad server can check around 14 billion candidate passphrases per day.

edit:

It's not. To brute force your own local encryption, an attacker needs access to your encrypted file, and dedicate all his computing power to just your case.
With Brainwallets, one attacker can brute force all existing users on the planet at the same time, and thus has a much larger chance of finding a match.

Okay, well you said the same thing I did, just faster... Smiley
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
I would assume it's the same as choosing a passphrase for your encryption vault.
It's not. To brute force your own local encryption, an attacker needs access to your encrypted file, and dedicate all his computing power to just your case.
With Brainwallets, one attacker can brute force all existing users on the planet at the same time, and thus has a much larger chance of finding a match.
full member
Activity: 299
Merit: 100
As been discussed many times before using a Brainwallet is a bad idea.

I disagree, I have never lost anything from a brain wallet but I have lost quite a few coins from failing hardware wallets and dying hard drives.


I have to agree. It would appear to me that your Brainwallet will be as secure as the passphrase you used to create it. So if you choose a very difficult passphrase your brainwallet will be secure. I would assume it's the same as choosing a passphrase for your encryption vault.
full member
Activity: 340
Merit: 164
Did a small test:

Code:
dictionary word, received bitcoins, wallet address, private address, current balance
Found used wallet: automobile,0.00006460,1F38xmnZPVsDtt5n4zjrowJequwSHL1ALT,f4c7ec93811087e5c3da505c080be9badac8b956d62aa6f13e02a56bbbbaee8a,0.00000000
Found used wallet: champions,0.00005460,15wyRo8uzzFAe98MvgnsHM8BzQrghdxDZB,7f18c9fcb3aac93ee3adc39486a3fcb1ff69bd4b036437c0fc20f32f2c1112d3,0.00000000
Found used wallet: Cinderella,0.00005460,13MFaz8tBX8vr5aYd2kEbfuLiov4uCbL5j,c728d8328425762a5801ab3dcfbb92d7989dcfcde5b52b094042d6d7a8456c4e,0.00000000
Found used wallet: millionaire,0.00005460,1QFkX2h8BKijQwQ5hSzeW5uhtVgSGxs2VM,725544de96fa7e38e7c1e3911d79770f6de178c52d4b87702ad820f5fe7e135c,0.00000000
Found used wallet: sultan,0.00020108,13kynW3MZXwR2QABv9u4oz6BfCrL3izegh,02cf1cce1b9414df96996756be90dc9f025acfd806a060a07ae5bcf5b133fe12,0.00000000
Found used wallet: 1234567,0.00032923,1B96DTqj2GNFm5VGDfLGyCoZtDFvqWHjG7,8bb0cf6eb9b17d0f7d22b456f121257dc1254e1f01665370476383ea776df414,0.00000000
Found used wallet: buttonhole,0.00005460,1Ark1g3VUgWc6oUfTsj8ssTvkJEgTivXG5,a53ee1e8509e93360ebce965bec238fc6169896696ea318b795f6503debbeb6d,0.00000000
Found used wallet: decathlon,0.00005460,1KuwgrMWGMy7fP6nbBzB6S71QRjYqPhfRU,71508df592b4e7185299e7fcdf1de9165e9ff4d182085df3ab3fbbbc46adecbc,0.00000000
Found used wallet: announced,0.00005460,1AvkDHNFFrcFmN59jGAegdRwUmoQhykySN,3cf46ab4906eb199effdf0e8354e6a065a0213c5febbf8edb534b762bed6194a,0.00000000
Found used wallet: extravaganza,0.00005460,1EPMMSJXYsV8RqiGNuiU2Vfa8UTS82jPL3,b210d806ca7463d8d5a904d141a84ccdfb81d2afd9e51582dfb2462875e90bb2,0.00000000
Found used wallet: 6,0.00058258,1JmrvhqYP4EpSRAhuKkn2NtmPvPNCxA9Kd,e7f6c011776e8db7cd330b54174fd76f7d0216b612387a5ffcfb81e6f0919683,0.00000000
Found used wallet: tranquility,0.00005460,1CwgKGLDeWkmbapmTS97xre9G8z1vwxmVN,06b384b3b9798926c2a48eb5a4e8d9c651b29f33328b72a1a66c93210a39ac70,0.00000000
Found used wallet: passwerd,0.00050000,1DDeCGwbBabA1VuMLegXCNe8jonH5oKNEQ,f22da79757db234aa4a5b17acefd73f62c1be0eea0f195ee2eaabca9e5527b46,0.00000000
Found used wallet: roma,0.00100000,1DNPdWrno9DvR5xaU2mB5MQkFxUKHjCo9d,b0c27fca74fa91934900c9ffcb3dcca5b807a3c059a3b516cdd0788807b5ff49,0.00000000
Found used wallet: godfather,0.00005460,126itomxM9vVQbR1oGMirQv465adsfVeov,a55b0153fdbfc0fb5605e4ba6cb14642e9f17f008feb86853fbc27ad2b9fdf09,0.00000000
Found used wallet: breakthrough,0.00005460,1DCFdRouHvfzVErRMuS4wCM4y6PSa1U8KW,2142487324cdb6d8c5049bc331d48db21152f53ab33d0e4faaaa91ea79ba5f2d,0.00000000
Found used wallet: confession,0.00005460,1QDJe16GgwHuoFvADZnYuB6tt7Zs5rrzcz,ae714c76abba41e031af1ce848865082ff1e52de11e1c57590c5329e3c5efe41,0.00000000
Found used wallet: 123456,0.00177480,1565qkBbLcuFP78f7MFKkK8jtHGDwdSgvX,8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92,0.00000000
Found used wallet: pistachio,0.00005460,1LmEq6TGnKMyvLZ7vh61vLZBzCq73t4S6r,34c4ba8f5ba5f40e56e4056a7cfbf8b15f9db557bcafb8103f243aa7509ea802,0.00000000
Found used wallet: 1,0.21096594,12AKRNHpFhDSBDD9rSn74VAzZSL3774PxQ,6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b,0.00000000
Found used wallet: selective,0.00005460,176TwDNQdJ373vCysfMPmfEcGv8317KDhP,c0f7c0be2df73e42f3efadec327e70537bdd84d2c1b0016ff3c850ddd5a44e83,0.00000000
Found used wallet: marco,0.00050000,1NffPAxVTc7mixNS48NDRDmMKBJHmA6zBT,7c8ccc86c11654af029457d90fdd9d013ce6fb011ee8fdb1374832268cc8d967,0.00000000
Found used wallet: Anastasia,0.00005460,19KuT3SnUMPKeuUL47hFDSCoF8ay8KaHiN,e3facb7c91f0f86764b31e8d842100bf302d15bc14313453895c29e78f8a25be,0.00000000
Found used wallet: testament,0.00005460,183x5Uvmd74gL6hABb6JvLGLEBZDZ5JM8Q,039b1751609c775495c4bf7d4218285157cb920f11ea769b373bb1aa3ffe661d,0.00000000
Found used wallet: sacrifice,0.00005460,17mEdLbarARHbNqSa71zC9xwqGi6nHSSgG,d17bd922ea9dd14143a1c40cffad198af1314d34b49c819d47454114cb4bc224,0.00000000
Found used wallet: kindergarten,0.00005460,1KZJtoNrUL6JsQytoG3a5J2vP7CjvZW88f,7e48b820f4c8f67210bf2f416e533b3a2a24ccc7ab6c1d297d56b3d209ba3e6e,0.00000000
Found used wallet: jellyfish,0.00005460,1E54Rdd9cTmSRi6HvCcF5ioUjHhuJqWeqv,a0ea5328f032f1557fbc5d6516c59cc85e7c0fa270c43085f9c994ef2915449b,0.00000000
Found used wallet: irrational,0.00005460,1K25qPbzTTkqgSRmAwRzuScycVa6PJWhZW,2faee31f585e23f714b4298d880f85c71ad3a1a41d5812138ac29e38fdf14800,0.00000000
Found used wallet: occasions,0.00005460,1BikoR8icUa9YDYCksSU8jLemAcMi9wX8m,fdd0b4595d9e2287b65a2afbf7e7dab77041b63903aea24777c450d29f31be80,0.00000000
Found used wallet: cafemom,0.00013127,1127tVgpehWDG9CFqTw4xWvDbzTLydTJij,e31a852c5ef0e407c156b1cd1f62f847c80f7d93ad02d01a747fa54d5c86922c,0.00000000
Found used wallet: timeshare,0.00005460,1Mfu3PXVTR8QbSnfDkyVSQahXpsEeHkUCU,2327acf01775e30a0ceba54d5dd57e015243866acbda36d81149ef18a4ce3fce,0.00000000
Found used wallet: 42,0.13861027,14ZtDMZF1k2tFfVE1gzmTHMxyq8Maa6Hj9,73475cb40a568e8da8a045ced110137e159f890ac4da883b6b17dc651b3a8049,0.00000000
Found used wallet: cute,0.00009933,17MAEM2TEEvMXg5Vtq1SCmiJxCjFFsyqTy,17550e2bb9ff2c26dcce8ed178e326202cc9c67f16b79470767f01839a062249,0.00000000
Found used wallet: superman,0.03461000,18rSmNDoYC28pCLGP3XRqRJHkMw4X5rcwn,73cd1b16c4fb83061ad18a0b29b9643a68d4640075a466dc9e51682f84a847f5,0.00000000
Found used wallet: scientific,0.00005460,17iZyCFTvWrLQ3Zcvj5nCL6uY5EaHXwNEA,8592edc04aed3012ef2f4f447051e44409627bf4d8b7d8684822225e73f02a52,0.00000000
Found used wallet: phenomena,0.00005460,1CBdtKnXz5zqRggoxvbNtAqoomdLBZdV3P,8eb84dd4dcf6d17d96e26e57e09319a155ca0e92c8f944772910c1b80f84f5fc,0.00000000
Found used wallet: curriculum,0.00005460,1445daxre7ye9xKaYBbK4RJmGwx1pF6ZMz,d54eb7dce184bf90f597ca9dd1e548d13788be311d5e5ab8ecd5b64abf722fde,0.00000000
Found used wallet: prejudice,0.00005460,1ByttdYTgPFp5FK7rAM3cY68Q7926dp2E4,14a62b33decfa1b796452370c0a1c91136f8f71ebe1a469a2691d7f6e55a288b,0.00000000
Found used wallet: footprints,0.00005460,1JMmw5CVGXLEGQwHQc2DvrFHhThBwjVSxE,297fd6226a7eab1523b3cd5cc1f2b6d61986ae0a273183c798397fcb8ff2001e,0.00000000
Found used wallet: pass123,0.00015519,1P9KLNMLetT2nbJzySxJ4NtdU6bdoSp9Ne,9b8769a4a742959a2d0298c36fb70623f2dfacda8436237df08d8dfd5b37374c,0.00000000
Found used wallet: yahoo,0.37090000,1Ee6Y6dHRBUMm7VDnS8Q3F2gNNi8n9HpMX,a7a4ded2d5035adb26a222c67032f04cfcd2279ab508cf2a7ff612aead97551e,0.00000000
Found used wallet: mechanical,0.00005460,17wj9uMuGtn6Sewg7MQ3jQVzJW3MosUh1L,96ae0f875bd9062d5e263473590877f82d65b160571e0d4385c65d9a3e3c081f,0.00000000
Found used wallet: sensation,0.00005460,1JMnA8vXBr8TJZnChgB5c1XYzeTCcYphJW,595f053100ff2951992165de4576db0099b48b26251737b22acec4bc31d89440,0.00000000
Found used wallet: propaganda,0.00005460,1GrXYT11f43YGeNXCJUEDj8jp9zoQ43LR6,c82d3d4865e41e2a263ff0427c4df2b8e3e43a85c835404d033d764468b3ba55,0.00000000
Found used wallet: foundation,0.00005460,1HvFQHSCVjstBGezidwqQQkMF3xXqwU8nL,2bd8b7b0d83e0ec92abdf6f714ca199a7874d08636965471035c4dcd1b38b6fb,0.00000000
Found used wallet: marketing,0.00005460,127Te2BL6YVyc7VwuTwTzGzTccFLa4h9c9,e2a530e251d3675034d23f5c5f87f54ec3182a088ba7d13350824794f8e6b76e,0.00000000
Found used wallet: traverses,0.00005460,18Nosr7qSuHHcjaDjPukz2ab1RkaV52RPV,4c3242e2a5195cd8b3acfcb68cceea61a8a57eed4bc0a6ba818c1ef0eba963c9,0.00000000
Found used wallet: chemistry,0.00005460,14gAvxeiAck9JkzY7y953roZWJYLAaj3y9,de0152f952776f09f537d309f1f3f0ec7369c8df1297071e946952f798c86063,0.00000000
Found used wallet: the,5.28098999,1CgCMLupoVAnxFJwHTYTKrrRD3uoi3r1ag,b9776d7ddf459c9ad5b0e1d6ac61e27befb5e99fd62446677600d7cacef544d0,0.00000000
Found used wallet: Albuquerque,0.00005460,1HQG98kysyBNfYecfBLAoGANPzT1tvvJ8N,b3fb95a5f48cd83a60f9edcc6b5bc75078f526eea51ec65575d80505c9baffe0,0.00000000
Found used wallet: newsletter,0.00005460,1BYsS2USaFj931LqyG3Fctwp6pTfoyEhDN,dd6f465f6810e92c01cf36d8272b2181ac54f825365184ef4255b27ef917677b,0.00000000
Found used wallet: outrageous,0.00005460,1J92VCVVhy2h9vTE6RGvAYfYfuZbe1DYpX,d560e0630ab7cc86d34bd770986c86c077bf70b110b65bed6c517a56790cbd50,0.00000000
Found used wallet: mistletoe,0.00005460,15GHniyPzmhaJ4YWyLQ3JyajBfQRLwZFAW,9dd4592981dca3318ebd8ef8c62163532761dfff8d70882dca1e51228edfba50,0.00000000
Found used wallet: anniversary,0.00005460,14wMQhfw4bFFxzcyUVzgmVamjCjzXeozuJ,40c12bd9c3e15b47999aeda1dd3bf3ecad770496cec7a0ab16246f85eca366cb,0.00000000
Found used wallet: Bruxelles,0.00005460,1GCmP1H19mGRmXd9R4QMeKAQuUutd2C2dB,1f34d736766d93f0ace55e14e5eee7e041b36162aa918db0b467bafa5f5098f7,0.00000000
Found used wallet: kill,0.00035693,14GVHgqKmXZoxGzPuBAgkyDhWSpk6ZhmGb,2bda9b4dfbabfdb17cd74d827768da5198ae2b8155002a494524bbeaf6f5cdba,0.00000000
Found used wallet: dictionary,0.00005460,17ABHtqc9swa1sjifBATY4jMyccoKkccj8,177ca70f42def1238e36da329473263ed3feadd14094c079a2230be0193436f5,0.00000000
Found used wallet: retrospect,0.00005460,15Hus5kYDKtVPzEHMXd5t6D8HCHWVXJpxr,4836600918f39fa20fd2afbc4aa8e27bd4e5e770ad15e222241f865f6290af67,0.00000000
Found used wallet: aftermath,0.00005460,1un9QyprNTdFeDpF2wn8xVVAvzupSBL1T,bf648e312779342bb0c687654e34338830c9a6df999f1d64bf3e2237e93e222a,0.00000000
Found used wallet: Ridgefield,0.00005460,16rwmZZX9TkH57xoVxBha48zLmc28RThcH,425c4905c4f30e52b29a65a2ec51c76e657d17879134c1e812abf9dce6b77870,0.00000000
Found used wallet: leslie,0.83726198,1LaXN9PTDqs9w3eokECrcXapiALqDBGoRs,104f24e15f4dba76498bb256593dc6d95876d881ee2201ff369225b6d51e8b45,0.00000000
Found used wallet: residents,0.00005460,16BadGA5TgxFb9LsT5XztJVq8HFc8W9Fje,50286229439eccf54660bd7d555a4f7c6223d14d23b1565b7a2f71f359686144,0.00000000
Found used wallet: penis,0.00013277,12TDRfu5EqepHd1fNBiv4ThJxbeLNQRYe5,f6952d6eef555ddd87aca66e56b91530222d6e318414816f3ba7cf5bf694bf0f,0.00000000
Found used wallet: Password123,0.00010000,1CZMi7F5F3gq7e67SjJTFsoTZuj1ms5fqm,008c70392e3abfbd0fa47bbc2ed96aa99bd49e159727fcba0f2e6abeb3a9d601,0.00000000
Found used wallet: gymnasium,0.00005460,1BPWT2MYe5MJQntqUKMHe1oLPQuHbQiKuQ,db7d1e32769c6a3bbe48af465d898b74e5a69f243eadd50ce5cfca5e42614a8d,0.00000000
Found used wallet: horseshoe,0.00005460,15qEK5KARYpcxH9iarXq6MsFZAcBj3FuN7,1f9fbd028c61b5062a91d6db0df4849a474ef8137963a154f8d51080a1871389,0.00000000
Found used wallet: chocolate,0.06151460,1DTqPEUuuTeCJAYDadDnoPDKGvqDVFLRJN,7499aced43869b27f505701e4edc737f0cc346add1240d4ba86fbfa251e0fc35,0.00000000
Found used wallet: supernatural,0.00010920,1KARJxv23j232tB9XHVDCu9yYpALLZH97c,c1b59ba0c56e6b217dfdd0de59e40718568517c076a012c4ea34ba867f08c5e2,0.00000000
Found used wallet: barbie,0.00000666,1KqHsf6rwscLD6TkznauZZ6QPCwRkK4mNy,15065d771f7c8746bd30c125f9bb68a5ec7a84fccd7f0a82b38e760f39521c05,0.00000000
Found used wallet: 22222222,0.00100000,1Kq2aXcq1R1mFtRkdYS2n6bmvnGtzcawgK,33a7d3da476a32ac237b3f603a1be62fad00299e0d4b5a8db8d913104edec629,0.00000000
Found used wallet: boris,0.00066602,1CxNDxKBE4kJADZmteBfzbpW6FsrTZfkMW,0df89317e02535902d116be0f27294a75145339bf4af53fb35131aea8071a0e1,0.00000000
Found used wallet: hitler,0.00101000,1EYz2AhbVe2GJ1th1j5czNkAeSBViQfrUW,fd70ad909b94deb27b460692084d9f2b1dbc9df3c6bcfd3caee571e707031e3f,0.00000000
Found used wallet: brilliance,0.00005460,1Pra4fu9seTEGmEKDmtuhJDJ2ThjC9hT3d,b9573e6bb24c4c2411affe6ff4b97e16e0e3c7e6f0d28a6033b21fd74aec07f3,0.00000000
Found used wallet: magazines,0.00005460,13DaJn8eqvBDiuUoafUmD5n3LAXFhQyDY6,16f75b51f05c7d5c4419881f4d43b5635417e9cdfb51230f2dfed41e73ef0ba8,0.00000000
Found used wallet: mysterious,0.00005460,1AFg71PXb8KQHj4pQqiCx47Q5siMj7FqA1,da7cc64ae8ad7e0b926b366259b43fdc92dae8c483214a5665b3711a59d38255,0.00000000
Found used wallet: samuele,0.00010000,16TaVKKa9fVimReN2RpsnEXELA8ddL9eUa,6c1bdfb0f1ec46ffd6ddb972d02049c9d2168515bd9fd23c7eda144607891b5f,0.00000000
Found used wallet: Descartes,0.00005460,1PBCsNt8Hsqh1BhEPHbYAa28YgruL5mz7A,c7a7f7571af5fa3e0c75800058edd8b66704e042e6a16a79c41cf7ea3df3aad1,0.00000000
Found used wallet: astronomy,0.00005460,1PxfCWr5w1iZmGsqmM8d7iWru5kec69ER6,603354159847d671cd7c8e67b726829ebc19101932e2dbafd8da87ebd41cd1b6,0.00000000
Found used wallet: hurricane,0.00005460,12CZfr7SoYMRB3JNbX3oG18La1ZVSkkDwd,3fb312f8c4f8ecac0a0586a9b443ed140697af9256f3208625a370c77d47c92d,0.00000000
Found used wallet: Alexander,0.00005460,1HuaMiuSi2Y1RYAokNFifNG1nVweC4sXQ7,dbadfc88144b0c153a2d1bdf154681c857a237eb79d58df24e918bca6e17db05,0.00000000
Found used wallet: ballerina,0.00005460,17q6Ua27SkRoQyyWNy2T72NeiWcJZBnSYC,5237f55320b3a8b73460ed0c24dac63b5b9a5fe22811e76793705b342238147f,0.00000000
Found used wallet: embroidery,0.00005460,173hDVCYm9X9tT4jyknmoT337f45uF7Jq2,1f276c3d7706932b737ee3063b3310549272996e77fac5aa2d0a7c457923c29c,0.00000000
Found used wallet: transportation,0.00005460,1NFHt3TCXCkqf64VnFEfNt8ERQ8EqA36w9,0b349c79e44d2b99d730dd75fa754c9e5c9c055bdd78ad07504e4464479d8f5c,0.00000000
Found used wallet: franchise,0.00005460,13FNmgmXb3YR1CMSd3rcYpoDso96qAS1gj,9fe8ef24525db81848e6c53328e1d5aa55bfb178f8e4555ca3d4b614f0ff520d,0.00000000
Found used wallet: fireflies,0.00005460,16UMA292BZoMGv18qt9e5zfHhmJL9NnCX8,161c26cc674bc61b2f4f0e96f51d75753a0ac436f7053806897efdc952997342,0.00000000
Found used wallet: calcio,0.00020000,151n92Legc2a9g9UprisDc6LUJGqE4MUKT,7bb858128c1e10a5e12e71c71a7b681f20942fd645c9628d4da84a93bf6bd8d7,0.00000000
Found used wallet: separator,0.00005460,1Ki1eZsXHJ5cQq8HPDZB6WkHQX9kCaBpLi,080856f98d1eb14b814733d0c19b1af3161009c39e8e44ac79fe80a05b94f425,0.00000000
Found used wallet: cooperative,0.00005460,1PrjPiS3NFAxpK9dwRSEQiFjSyzUSMSAbi,975a0c6243cb25756fb243ed67c7db4c492b97f124baf7ace9c04b243d0fcbd5,0.00000000
Found used wallet: connection,0.00005460,1KX4zUq86KfWz8gDpn3FVME2HTPQjYhzCJ,b38d9d168c3aedf156f4f249b81adaef4b738790510573f57b502cca0c35f16f,0.00000000
Found used wallet: consulting,0.00005460,1ARo4nKDrdAX6SDNZXyaBHtayG4TpUm64V,7242dfd44b1ebef4fa2ad4d3abf2fea23ff5a4c798e2a8db6e6c033ea39e29c6,0.00000000
Found used wallet: mirko,0.00010000,1PasPhdM1MfAZKLY5HkL5ddsRMX3oEFR6E,6eb44ff6ac59c9b9d39e7ac203910f0384e4c2d3a59c8bfd7fecb7a5f6de1e10,0.00000000
Found used wallet: essential,0.00005460,1MmYN5UbP5MCEHrtCtAzzQXifRnVB66Neq,a55751cecd11bad874efb36d7746fd2651a5736260d611ccb8fb43091b90e744,0.00000000
Found used wallet: lucia,0.00020000,14Uqwu9yudb1dBS9GRgjyELi5Hi2xziXLz,6326e0e8cfdaab9af83026a0620bafd05179e3a0cd1b812222682d86285b30cc,0.00000000
Found used wallet: rendezvous,0.00005460,121Cr2RTisBQfkXchgX9dJqeDmFyQAxnnH,b8a201afe114d8d6e7b9fb56dd3a3ad6fc33a96fda253ba13b0281aa29c1002f,0.00000000
Found used wallet: grapefruit,0.00005460,14WiKYHcM2DUvXdYdBXCjWwpG6N5uhVUnx,e30970665ed2e34594c2645ba9d3c307b36fc95efb92136b18ebdeee48b9072b,0.00000000
Found used wallet: hydraulic,0.00005460,19rYb8CWW2sBRR8dvBfNrxVormsPJM3Q5w,2b0d221ea282a3ba40c2c95983b6e332ada542a12527d2f7892ad1680e3ca94a,0.00000000
Found used wallet: performance,0.00005460,14LySzy6yoJ99txi91ZfUXFwofcv4ZTu6V,4a1898716ef67796fcc80c7426c4f876d398de27da5c73a3accf425e42a7f412,0.00000000
Found used wallet: trieste,0.00010000,12SzWpN6A7V7eQUx9yzjiJ5Pu5yDNzWf75,f32484b9ba652695099b62eb326c4279ad3ccee64f875ab9568dc6de7afde8ad,0.00000000
Found used wallet: bittersweet,0.00006460,1LBYuF4X374SoNckFouQqKUh9uRL95aFN1,556ded69059a18b07235d44763c00d840a81aeff461aacf494ea42dc92830ae4,0.00000000
Found used wallet: lokesh,0.00060000,1H8uZX7qiC1WHxbTjNqF17AMSLJtYYAqoh,a5f3ad0d95c2afe089bc751a56f8a0f34e19bb28c528263d9135ac0ea45ba708,0.00000000
Found used wallet: department,0.00005460,1Kx88AS1hK6rBCPBkt5K5mZnYM24iXGgE,2ad29f65743a0524d916bfb3e24f5034c970b8daa7749699a88bd7096129fa09,0.00000000
Found used wallet: cows,0.24308000,1QEmV8FoxNQqjREEhyXeLn1UMSejBQXoWt,c6520d7c46b53b2f4567cb3b29b93b19c775b601d5a0e9e06315ca9e79751e7c,0.00000000
Found used wallet: interiors,0.00005460,194pKiQWzfNYF1TRKWrURMGc63z4L5amKB,91538b64771cbd776fe85f028c8a264583ed29a37445822a60dd07106577ec42,0.00000000
Found used wallet: conductor,0.00005460,1MgrG41eyd69DE79fzQwYLqDr7rWzNtCza,0380db97ec507816cb2435f11d56f1bfe151dea2ae25a75859e9b2f0417dda5b,0.00000000
Found used wallet: purchasing,0.00005460,1APUFeQcWfE1Q6bfvWVRmRgG8zX46HUozr,93fa6393336f975afcfb6e9bd36654239164e645f64ce2e9d4ab75149ee6bd8e,0.00000000
Found used wallet: invention,0.00005460,12cBWFm6pFm384RfA6yhB4KTWSg7AiBMBJ,5bebe4b948683362feab006f3c34d9045902a470ca7dcbbf35f0275295c9c3f4,0.00000000
Found used wallet: Katherine,0.00005460,1EKTFKEnGodxApZ2akoVwKpTbshgW8As6j,5632e195ae87f23c49c2803e1c40d0401d5f8da65ad49c6e01bf8e803266ecc9,0.00000000
Found used wallet: crocodile,0.00005460,1JtsNnvgMGg71G9iH63WG6JGwjuYVKb5zC,02766f3002eaa501317fc1ac658a30ec6fba6be867f2624ce7d2b8bc31a83ca8,0.00000000
Found used wallet: highlander,0.00005460,1CaTEzjjRgDa9LXqQpdqga3SPPnEBcu7PB,300cb2d7a5270ddfccd779f46c7bc9839db6f6cf6f08200be93407622d159954,0.00000000
Found used wallet: breakfast,0.00005460,1PEysPp7nNkfD1cPad6gcYd29f8oW1iZ9n,7c58ea253628feed6583e78db4fd9fab131e0016ade168b4c200eb41d6aa93b1,0.00000000
Found used wallet: placements,0.00005460,1NTe195aMUu7zB2uY4y3KsvQ5YNkTzkZov,2be9c792a9d92b04b3057a7eb76fca2eb3ae77eda06156d97491fdb2ed690911,0.00000000
Found used wallet: freemoney,0.28061728,12VXcoAabff2pjwchqDZm25drNnLEM4vKy,8416c455bad6679155f5f431ec228491500d692982a5a1ffebee83d4f9819f27,0.00000000
Found used wallet: incognito,0.00020000,14MdHVZtDWhrm21o1W4Ld5saAMXxj1FtgU,3c7f75ed7842eae7dc838f6202355fcbf8c6eff336e11088b31fff48f4df67ae,0.00000000
Found used wallet: rodina,0.05777600,19W4zoNbRvJAibJ5nbQqSvxYVLvui4DXiB,92971e212c4073e786c0f116915d2481f985736696b2eb0c591dd563ae612f66,0.00000000
Found used wallet: archipelago,0.00005460,1GjAKvscLxxBRKq9afETLrKtQEv5ydYnNF,201efa284e839229c41b8eda3c74f8d3a58fd9941f5b6d8424622b1789a78379,0.00000000
Found used wallet: Barcelona,0.00005460,1NjGkpUQrj7S8PQwdtaxJNRAJVeM4Jf7GW,062dda15f8838576019a50b01bdf29cc5046008bbfcfaa292350ccd382b51ec9,0.00000000
Found used wallet: different,0.00005460,13zJp8PV7cY2cgLubFQzDFihHArgBgtM3C,9d6f965ac832e40a5df6c06afe983e3b449c07b843ff51ce76204de05c690d11,0.00000000
Found used wallet: instrumental,0.00005460,1F7Xni8kEREsTDMfVoh137TNhzLUwrzBWC,32528ed2244f2862f45198934d8ad057ab94ee63d928f99c1188aeae20eee65b,0.00000000

Nothing very special but interesting to see some wallets had 0.1 or more in them in the past.
legendary
Activity: 2268
Merit: 1092
An unusual passphrase:

WARNING: This key is not certified with a trusted signature!

(That's the passphrase.)

https://www.blockchain.com/btc/address/8d940736aae07fb4df7865b1e163d7bcd4112ce0

The fact that you were able to find this convinces me that any passphrase that can be memorized is not safe.

This appears to be generated by GPG, so at first I thought it may have been someone feeding the output to SHA256 to generate their private key - without realising the output was an error message - but from a quick look the program is more verbose when reporting such an error. Perhaps it's a geeky easter egg?

The way I found it was odd: I extracted strings from my boot drive, and fed them to brainflayer...
legendary
Activity: 4298
Merit: 3209
An unusual passphrase:

WARNING: This key is not certified with a trusted signature!

(That's the passphrase.)

https://www.blockchain.com/btc/address/8d940736aae07fb4df7865b1e163d7bcd4112ce0

The fact that you were able to find this convinces me that any passphrase that can be memorized is not safe.
full member
Activity: 340
Merit: 164
Is there any python script to start testing passprhases or wordlists? I would like to test some private lists.

EDIT: found one and got it working
legendary
Activity: 2268
Merit: 1092
An unusual passphrase:

WARNING: This key is not certified with a trusted signature!

(That's the passphrase.)

https://www.blockchain.com/btc/address/8d940736aae07fb4df7865b1e163d7bcd4112ce0
legendary
Activity: 2268
Merit: 1092
Latest passphrase to be found is one of those that seems so obvious once it's been discovered.

https://www.blockchain.com/btc/address/377a08e417b77640cdf8ce300d45897384479e38

The passphrase is (in its entirety) Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

https://en.wikipedia.org/wiki/Lorem_ipsum
legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
A symbolic act?
My guess is someone uses a (dumb) script that doesn't check if the balance is worth the fee.
legendary
Activity: 2268
Merit: 1092
I cache the blockchain API data. Just had a thought to delete the cached data for wallets which were previously showing (small) balances, and noticed that despite the almost nil value of each wallet, some have been cleaned out within the past few months. (A symbolic act? A researcher importing private keys into his client then forgetting about them?)

https://www.blockchain.com/btc/address/462259f237e3cd1b088e466da8f6da3428971a07 psykachu39 (0.00000001)
https://www.blockchain.com/btc/address/551222dc9f6f3ce2ec65b338549e35a8f8f14afa psykachu56 (0.00000001)
https://www.blockchain.com/btc/address/58ce18bdc94c7f2601e48f1aa27fabde545634ee psykachu137 (0.00000001)
https://www.blockchain.com/btc/address/7d44d5edef9b6f21ae780d1918dc2e28ea4e1ed2 psykachu138 (0.00000001)

https://www.blockchain.com/btc/address/97202615f86a3cdeb991d3623a692e2ab7380886 hello world hello world hello world hello world hello world hello worldhello world hello world hello world hello world hello world hello world (0.00001661)

https://www.blockchain.com/btc/address/59c872935f6c0acc81aa953cf3009f96597b250f [email protected] (0.00000600)

https://www.blockchain.com/btc/address/e0d996260606eb7994517a2b173f917c79d55745 fuck bitcoin (0.00001000)
legendary
Activity: 2912
Merit: 2066
Cashback 15%
i just ask why you have to write and post script here. Now anyone can use your script and scan brainwallets with you

Because simply closing your eyes to a problem won't make it go away.

Anyone willing and able to steal brainwallets won't need a thread like this to run their operation. Anyone lacking the skills and tools to steal brainwallets won't gain either from simply following a thread like this.
hero member
Activity: 1194
Merit: 573
OGRaccoon
The tools are already out there.

You could argue publishing the result to be a issue but nothing I have posted is not already in the public domain.

https://www.youtube.com/watch?v=foil0hzl4Pg

A simple google search or github will show how many tools are out there for this type of thing.

hero member
Activity: 1194
Merit: 573
OGRaccoon
where is admin, mod? Why topics like this can exist?

Security liabilities need to be discussed publicly, otherwise you have no basis for public discourse, awareness and improvement.

Note that this thread is about monitoring and documenting cases of brainwallet thefts, rather than stealing them.

While these thefts are happening regardless of whether threads like this exist, it may prevent some people from generating weak brainwallets and becoming victims themselves.

so why have to write and post script here? Teach everybody do with him?

1. Most of this code is available online or on github as already said we do this to improve the security of bitcoin to help users understand about brain wallets and the dangers of them.
2. I feel it much better to see a community attempting to eradicate and document this by-design un-secure wallet.
3. Who would you rather be talking about this issue,  the open community who are pushing new users away from this dangerous way to store funds or the criminals behind closed forums scanning new users funds away.

I have a feeling this guy has a brain wallet Smiley
hero member
Activity: 1194
Merit: 573
OGRaccoon
Seems like a waste of time to use random BIP words, as the seed word generation process involves checks, and many randomly generated combinations will be invalid.

Plus, even with a list of valid word combinations, it's a fools game in terms of odds.


That may be the case but what about weak seeds I also think the use of the script below might be helpful?


Hmm... what's the point of throwing randomly selected word sets at your address checker? The chances of matching a 12 word passphrase are essentially zero.

I think your size calcs may be off a bit, too. I pre-calculated the RMD160 values for all ASCII 1 to 5 character words, and the output is about 0.9TB in size. To increase to 6 characters would result in a file size about 95 times that (about 80TB) and to go up to 7 characters would result in an output of over 7000TB. And consider the amount of time needed to check 135 trillion entries.

That's one of the interesting things about SHA256 brainwallets (so long as you're doing this for fun) : it can be easy to find them, but it's also very, very hard. Smiley

As for the tables sizes I think they are about right to be honest they are not hash160's they are raw hex combinations see below I have tested on the smaller value ones at the come out pretty close to the figures quoted.  So the DB for this type of data is vast.  

I am currently at around block 259090 of importing all the transactions into mysql database ( Currently 3 days reading from blk files)

Code:
Combination data from 10Hex  ./10hex | brainflayer -v -b example.blf

https://github.com/wpatoolkit/10-Hex-Generator

010316ead1
010316ead2
010316ead3
010316ead4
010316ead5
010316ead6
010316ead7
010316ead8
010316ead9
010316eada
010316eadb
010316eadc
010316eadd
010316eade
010316eadf
010316eae0
010316eae1
010316eae2
010316eae3
010316eae4
010316eae5
010316eae6
010316eae7
010316eae8
010316eae9
010316eaea
010316eaeb
010316eaec
010316eaed
010316eaee
010316eaef
010316eaf0
010316eaf1
010316eaf2
010316eaf3
010316eaf4
010316eaf5
010316eaf6
010316eaf7
010316eaf8
010316eaf9
010316eafa
010316eafb
010316eafc
010316eafd
010316eafe
010316eaff
010316eb01
010316eb02
010316eb03
010316eb04
010316eb05
010316eb06
010316eb07
010316eb08
010316eb09
010316eb0a
010316eb0b
010316eb0c
010316eb0d
010316eb0e
010316eb0f
010316eb10


after setting up ABE it is far quicker at checking against the database for balance than my previous method of API calls to Blockchain.com

Code:
def mn_encode( message ):
    out = []
    for i in range(len(message)/8):
        word = message[8*i:8*i+8]
        x = int(word, 16)
        w1 = (x%n)
        w2 = ((x/n) + w1)%n
        w3 = ((x/n/n) + w2)%n
        out += [ words[w1], words[w2], words[w3] ]
    return out

def mn_decode( wlist ):
    out = ''
    for i in range(len(wlist)/3):
        word1, word2, word3 = wlist[3*i:3*i+3]
        w1 =  words.index(word1)
        w2 = (words.index(word2))%n
        w3 = (words.index(word3))%n
        x = w1 +n*((w2-w1)%n) +n*n*((w3-w2)%n)
        out += '%08x'%x
    return out

def stretch_key(seed):
    oldseed = seed
    for i in range(100000):
        seed = hashlib.sha256(seed + oldseed).digest()
        return string_to_number( seed )

def mpk_from_seed(seed):
    curve = SECP256k1
    secexp = stretch_key(seed)
    master_private_key = ecdsa.SigningKey.from_secret_exponent( secexp, curve = SECP256k1 )
    master_public_key = master_private_key.get_verifying_key().to_string().encode('hex')
    return master_public_key


class Account(object):
    def __init__(self, v):
        self.addresses = v.get('0', [])
        self.change = v.get('1', [])

    def dump(self):
        return {'0':self.addresses, '1':self.change}

    def get_addresses(self, for_change):
        return self.change[:] if for_change else self.addresses[:]

    def create_new_address(self, for_change):
        addresses = self.change if for_change else self.addresses
        n = len(addresses)
        address = self.get_address( for_change, n)
        addresses.append(address)
        return address

    def get_address(self, for_change, n):
        pass
        
    def get_pubkeys(self, sequence):
        return [ self.get_pubkey( *sequence )]
class OldAccount(Account):
    """  Privatekey(type,n) = Master_private_key + H(n|S|type)  """

    def __init__(self, v):
        self.addresses = v.get(0, [])
        self.change = v.get(1, [])
        self.mpk = v['mpk'].decode('hex')

    def dump(self):
        return {0:self.addresses, 1:self.change}

    @classmethod
    def mpk_from_seed(klass, seed):
        curve = SECP256k1
        secexp = klass.stretch_key(seed)
        master_private_key = ecdsa.SigningKey.from_secret_exponent( secexp, curve = SECP256k1 )
        master_public_key = master_private_key.get_verifying_key().to_string().encode('hex')
        return master_public_key

    @classmethod
    def stretch_key(self,seed):
        oldseed = seed
        for i in range(100000):
            seed = hashlib.sha256(seed + oldseed).digest()
        return string_to_number( seed )

    def get_sequence(self, for_change, n):
        return string_to_number( Hash( "%d:%d:"%(n,for_change) + self.mpk ) )

    def get_address(self, for_change, n):
        pubkey = self.get_pubkey(for_change, n)
        address = public_key_to_bc_address( pubkey.decode('hex') )
        return address

    def get_pubkey(self, for_change, n):
        curve = SECP256k1
        mpk = self.mpk
        z = self.get_sequence(for_change, n)
        master_public_key = ecdsa.VerifyingKey.from_string( mpk, curve = SECP256k1 )
        pubkey_point = master_public_key.pubkey.point + z*curve.generator
        public_key2 = ecdsa.VerifyingKey.from_public_point( pubkey_point, curve = SECP256k1 )
        return '04' + public_key2.to_string().encode('hex')

    def get_private_key_from_stretched_exponent(self, for_change, n, secexp):
        order = generator_secp256k1.order()
        secexp = ( secexp + self.get_sequence(for_change, n) ) % order
        pk = number_to_string( secexp, generator_secp256k1.order() )
        compressed = False
        return SecretToASecret( pk, compressed )
        
    def get_private_key(self, seed, sequence):
        for_change, n = sequence
        secexp = self.stretch_key(seed)
        return self.get_private_key_from_stretched_exponent(for_change, n, secexp)

    def check_seed(self, seed):
        curve = SECP256k1
        secexp = self.stretch_key(seed)
        master_private_key = ecdsa.SigningKey.from_secret_exponent( secexp, curve = SECP256k1 )
        master_public_key = master_private_key.get_verifying_key().to_string().encode('hex')
        if master_public_key != self.mpk:
            print_error('invalid password (mpk)')
            raise BaseException('Invalid password')
        return True

    def redeem_script(self, sequence):
        return None

def b58encode(v):
    """ encode v, which is a string of bytes, to base58."""

    long_value = 0L
    for (i, c) in enumerate(v[::-1]):
        long_value += (256**i) * ord(c)

    result = ''
    while long_value >= __b58base:
        div, mod = divmod(long_value, __b58base)
        result = __b58chars[mod] + result
        long_value = div
    result = __b58chars[long_value] + result

    # Bitcoin does a little leading-zero-compression:
    # leading 0-bytes in the input become leading-1s
    nPad = 0
    for c in v:
        if c == '\0': nPad += 1
        else: break

    return (__b58chars[0]*nPad) + result

def b58decode(v, length):
    """ decode v into a string of len bytes."""
    long_value = 0L
    for (i, c) in enumerate(v[::-1]):
        long_value += __b58chars.find(c) * (__b58base**i)

    result = ''
    while long_value >= 256:
        div, mod = divmod(long_value, 256)
        result = chr(mod) + result
        long_value = div
    result = chr(long_value) + result

    nPad = 0
    for c in v:
        if c == __b58chars[0]: nPad += 1
        else: break

    result = chr(0)*nPad + result
    if length is not None and len(result) != length:
        return None

    return result

__b58chars = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz'
__b58base = len(__b58chars)

def EncodeBase58Check(vchIn):
    hash = Hash(vchIn)
    return b58encode(vchIn + hash[0:4])

def DecodeBase58Check(psz):
    vchRet = b58decode(psz, None)
    key = vchRet[0:-4]
    csum = vchRet[-4:]
    hash = Hash(key)
    cs32 = hash[0:4]
    if cs32 != csum:
        return None
    else:
        return key
def public_key_to_bc_address(public_key):
    h160 = hash_160(public_key)
    return hash_160_to_bc_address(h160)
def hash_160(public_key):
    try:
        md = hashlib.new('ripemd160')
        md.update(hashlib.sha256(public_key).digest())
        return md.digest()
    except:
        import ripemd
        md = ripemd.new(hashlib.sha256(public_key).digest())
        return md.digest()
def hash_160_to_bc_address(h160, addrtype = 0):
    vh160 = chr(addrtype) + h160
    h = Hash(vh160)
    addr = vh160 + h[0:4]
    return b58encode(addr)
mnemonic_hash = lambda x: hmac_sha_512("Bitcoin mnemonic", x).encode('hex')
hmac_sha_512 = lambda x,y: hmac.new(x, y, hashlib.sha512).digest()
Hash = lambda x: hashlib.sha256(hashlib.sha256(x).digest()).digest()

def hack(t, d):
while True:
guess = random.sample(words,12)
#guess = "shirt always flat become bird company everytime poet least soar crack story".split()
#print guess
seed = mn_decode(guess)
mpk = OldAccount.mpk_from_seed(seed)
acc = OldAccount({'mpk':mpk, 0:[], 1:[]})
#pk = number_to_string( secexp, generator_secp256k1.order() )
#compressed = False
# SecretToASecret( pk, compressed )

addy = acc.create_new_address(False)
myurl = "http://localhost:2750/chain/Bitcoin/q/getreceivedbyaddress/" + addy

f = urllib.urlopen(myurl)
balance = f.read()
print balance + ": " + addy
if balance != "0":
with open("addresses.txt", "a+") as myfile:
myfile.write(balance + ": " + addy + "\t" + seed + "\n")
legendary
Activity: 2268
Merit: 1092
Plus, even with a list of valid word combinations, it's a fools game in terms of odds.

May as well just generate random private keys then. Smiley

Code:
// output random hex digits as a 256 bit priv key

#include
#include
#include
#include
#include

uint64_t timeuseconds() {
        struct  timeval thistime;

        gettimeofday(&thistime, NULL);
        return((thistime.tv_sec * 1000000) + (thistime.tv_usec % 1000000));
}

int main() {

        int i;

        srandom(timeuseconds() );

        while (1)
        {
                for (i = 0; i < 16; i++)
                {
                        printf("%04lx", random() & 0xffff);
                }
                printf("\n");
        }
}

Although this program seems silly, it was done for a purpose: to check the false positive rate of brainflayer.
newbie
Activity: 18
Merit: 7
Seems like a waste of time to use random BIP words, as the seed word generation process involves checks, and many randomly generated combinations will be invalid.

Plus, even with a list of valid word combinations, it's a fools game in terms of odds.
Pages:
Jump to: