Topic: [HOW-TO] Peel any Lealana XMR coin with or without the digital cert. (Read 214 times)

11/24 - Added some more details as well as an interactive Powershell 7 script you can use to get the hexadecimal from the base64 string.

Here is the PS7 code if anyone cares/thinks it may be backdoored or anything...

https://pastebin.com/42Ej8tee

Thank you owlcatz for providing this information

Omg owl, you did a fantastic job posting this. I remember that sweeping XMR funds is not as easy and fun as Bitcoin stuff.
To be exact it's quite the act - so your guide will probably help a lot of folks.

For the XMR cards I referenced these guides: https://bitcointalksearch.org/topic/m.51699439
Yours is much more detailed and the screenshots will help quite a bit, too.


---------------------------------------------------------------------------------------------------------------[/ I tend to spew my merit too fast sometimes - as soon as I have some available again it goes into this post. ---------------------------------------------------------------------------------------------------------------

No problem. It's not something I do often, but I've helped some members sweep 100XMR coins so I got kinda tired of doing it for others, even tho if someone wants me to I will, but for a fee.

As to your question, Indeed there is, but only if you have the "view_key" which is on the digital cert because the XMR chain is opaque/uncheckable itself. I was going to update the post above with more info about digital certs and what I know about them and the format etc actually, so maybe that will help more, just give me a while, I need some dinner.

Thanks!

Owlcatz...thank you for this. 

I have several Lealana Monero coins and I was just think, "how do I redeem these if need be". 

Question--there is no way to verify funding of a Monero funded coin like you can with bitcoin first-bits coins, correct?  Kind of the nature of Monero and anonymity I'm thinking.

General Information about digital certs that I'm aware of, feel free to comment if you know more

Most coins were sold in sets. The 3-coin XMR silver sets had paper certs and digital certs (if requested on the latter).

The 5 XMR coins had digital certs only. I hope everyone who ordered a roll (Only way they were sold IIRC) got the digital certs, but who knows.

Note the 5 XMR digital certs came in one message for all 20 coins, PGP-signed by smoothie. Hence, there is no way to post a PGP-signed cert from smoothie that will verify unless one gives out the whole roll's worth of certs if that makes sense.

Instead, smoothie signed the certs using the digital key image:

Reflink: https://bitcointalksearch.org/topic/lealana-brass-xmr-coins-for-sale-1661961

For the 4-coin sets, it depends on what you bought etc so same sort of applies to the PGP aspect.

This is what a digital cert looks like: (with some info changed ofc).


On the downside, he never released any kind of software to verify these, so many think the "View Key" is enough to determine actual funding.

HOWEVER, THIS IS NOT TRUE, The View Key only shows INPUTS, not OUTPUTS. So, that means if the coins were spent, the View Key would not reflect that.

Ref: 


Note: Sometimes there will be more than one "output_public_key" on the cert because it's XMR's basic equivalent of (unmanageable afaik) coin control & change output (Like BTC basically).  
More on that here in somewhat of a deeper tech analysis: https://wires.onlinelibrary.wiley.com/doi/full/10.1002/widm.1436

Since I still get PM's about this from time to time:

This is an updated version of this this post, for clarity and visibility - Lealana 5 XMR Brass Redemption Experiment:

This method requires the latest version of the XMR daemon & client software (Gui or CLI) - Get it here: https://www.getmonero.org/downloads/

First get your Monero daemon synchronized (NOTE: You can use a public remote node for this, but I highly recommend you sync/download your own copy of the blockchain instead, for security reasons ofc). - It's not very hard, just run the GUI and create a wallet and your node will sync if you leave it open - or if the cli, run monerod.exe in one window to sync the chain, and then use the cli client in another cmd.exe window.

Basic steps after getting your XMR node up and running/synchronized (Same as BTC, use a SSD for disk)!:

1. Peel the coin - Write down the chars or type them into notepad/whatever. BE VERY CAREFUL. Consult the image below of the fontset used by smoothie (COURIER NEW) for what symbols are what. Just one wrong char can make all the difference here!

https://i.ibb.co/S0GcD6S/0qqWmk9.png

Now you should have the private key in Base64 format.

For this tutorial, we will assume the base64 key on the peeled coin is: GVsbG8gd29ybGQ=

Note, I don't recall the number of chars on a peeled coin atm, so this is not a working example, it's just made up, not a real wallet/address.

2. Now we need to convert the Base64 key to Hexadecimal - I HIGHLY recommend doing this on a virtual machine or sandboxed, or a machine you can trust!

- EDIT 2024 - (see here for a script to do this for you using Windows Powershell 7)!

Linux: Here is the command to do the same thing (always easier ofc lol)

Replace or set variable $BASE64_STRING with your actual Base64-encoded string


These should both output the string: 48656C6C6F20776F726C64 , which is the hex-encoded private key we need.

Moving on....

3. Download this zip file to your local PC/computer: https://github.com/luigi1111/xmr.llcoins.net/archive/refs/heads/master.zip
    Extract it anywhere on a local disk drive, and then open windows explorer and find the file in the extracted zip file site/addresstests.html in a browser

    

4. On the top of the page, paste your Hexadecimal string you got from step 2 into Field 2. (Hexadecimal seed)
5. Click on the "Gen 1." to get the mnemonic seed



Now, we have the mnemonic phrase for the coin address/wallet.

Open the XMR Gui:



Click on Restore From Mnemonic Seed.



Paste or type the seed: rigid sabotage cottage lullaby tapestry evolved nodes asked aspire abbey abbey abbey lullaby and click Next.

Now... Wait for the wallet to sync. Coins will eventually show once it syncs against local chain.

If you are a command line person like I am, you can use the CLI (it's part of the GUI install as well).

How to restore the wallet/coins using "monero-wallet-cli.exe"
CMD prompt in windows:

monero-wallet-cli.exe --restore-deterministic-wallet, hit enter, give the wallet a name, then paste or type the 25 mnemonic seed when you are prompted. Add password, let it sync. Spend/redeem coins/whatever you want.


Again, once synced, you can spend the coins or whatever.

Cheers,
owlcatz