Author

Topic: Duplicate nonce hack nets 59 coins, worth $45,000 (Read 1314 times)

legendary
Activity: 1176
Merit: 1280
May Bitcoin be touched by his Noodly Appendage
November 22, 2013, 05:53:23 PM
#2
They also discovered at least 75 coins sent to invalid public keys, including 68 coins with public key 0.
Invalid public key? So pay-to-public-key?
sr. member
Activity: 338
Merit: 253
The recently published paper "Elliptic Curve Cryptography in Practice" by Joppe Bos et al at Microsoft Research, technical report number MSR-TR-2013-119, reveals that due to use of the same nonce in some 158 addresses it was possible reverse the keys for those addresses. However, unfortunately, by the time Bos had got there, Goldilocks had already swept the accounts into the address 1HKywxiL4JziqXrzLKhmB6a74ma6kxbSDj. A graph study revealed that there were two sources of the duplicate nonce problem, Bitcoincard, and Blockchain Info's defective wallet generator, as reported last August. They also discovered at least 75 coins sent to invalid public keys, including 68 coins with public key 0.
Jump to: