So if I understood correctly, at the time it was considered a scam because people couldn't redeem?
Or are the keys at risk of being compromised (even if they haven't as of yet)?
Topic: [WARNING] Sol Noctis Bull Coin Keys Compromised / Scam - page 2. (Read 4347 times)
I checked this code out on chatGPT and it gave me the following so if you have VS 2022 you should be able to get it working:
https://chat.openai.com/share/d2134341-25da-4437-a2f1-db9d26d8175d
Note I have not tried it yet, as I have no interest in peeling coins right now, but it should work, I just did not have time to test as I had to repair my VS2022 install for whatever stupid MS reason lol.
https://chat.openai.com/share/d2134341-25da-4437-a2f1-db9d26d8175d
Note I have not tried it yet, as I have no interest in peeling coins right now, but it should work, I just did not have time to test as I had to repair my VS2022 install for whatever stupid MS reason lol.
Can i get a 5th grade explanation for whats happening here?
Some, possibly all, of these coins have had their keys compromised
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.
As to why they used a non standard format, who knows.
-Dave
Compromised is not correct term.... that would indicate something happened such as the sweeping of funds.
They were "improperly formated"
Thanks to you both for sharing this method of converting to "normal" private keys.
I was also confused regarding *compromised* - so glad to hear they are not (yet
) - not sure if I do remember correctly, though, some of the newer ones (the 0.001 denominated bulls) had issues with the private keys readablility when peeled. Can anyone confirm / negate this? 
Can i get a 5th grade explanation for whats happening here?
Some, possibly all, of these coins have had their keys compromised
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.
As to why they used a non standard format, who knows.
-Dave
Compromised is not correct term.... that would indicate something happened such as the sweeping of funds.
They were "improperly formated"
Yes, improperly formatted is a better then compromised. Had a brain freeze this AM and was trying to come up a one or two word way of saying:
They did not create or print the keys in any of the standard ways that people use for giving us BTC addresses for use in collectables.
Side comment, after the yogg thing and the other issues with collectables, makes you wonder if we do go to some hardware way of securing them if things like this are going to be an issue. So a decade later (yes I know this was only a few years) instead of jumping though some software hoops we are searching on ebay for a obsolete NFC reader or something.
-Dave
Can i get a 5th grade explanation for whats happening here?
Some, possibly all, of these coins have had their keys compromised
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.
As to why they used a non standard format, who knows.
-Dave
Compromised is not correct term.... that would indicate something happened such as the sweeping of funds.
They were "improperly formated"
Can i get a 5th grade explanation for whats happening here?
Some, possibly all, of these coins have had their keys compromised.
The key that comes with the coins is not in a standard private key format. So, if you want to peel the coin and redeem the BTC you have to do a couple of other steps.
A few years ago cwil posted a way of converting what they give you to a standard private key, but it required some programming knowledge. I posted a simpler way.
As to why they used a non standard format, who knows.
-Dave
Can i get a 5th grade explanation for whats happening here?
Thanks DaveF 
Worked for all 3 coins.
FYI: All 3 were the Sol Noctis EAGLE 0.01 coins. So this does apply to both the Eagle coins and Bull coins
Worked for all 3 coins.
FYI: All 3 were the Sol Noctis EAGLE 0.01 coins. So this does apply to both the Eagle coins and Bull coins
I sent MJ a PM about this but since he asked I figure others might need it too.
I don't have a Sol Noctis Bull to test / check so I am using the information from the post about it.
THERE MAY BE SECURITY RISKS HERE SO MOVE YOUR COINS ASAP.
Step 1: Open up a web browser and 2 private tabs.
Step 1a: In tab #1 go to https://appdevtools.com/base58-encoder-decoder
Step 1b: In tab #2 to https://www.bitaddress.org
Step 2: DISCONNECT FROM THE INTERNET
Step 3: Verify that you are offline
Step 4: Verify offline again. Or not, it's your money.
Step 5: On the https://appdevtools.com/base58-encoder-decoder tab click on decode and treat output as HEX and put in the info from the coin
You can see it gives the same info as MJ quoted above. (Converts EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 to ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a)
Step 6: Go to the bitaddress.org tab and click on Wallet Details and put in the output HEX (ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a) where it says enter private key and then click view details. You should get the same info and the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a
NOTE I DID NOT TEST THIS WITH ANYTHING OTHER THEN WHAT WAS PRESENTED BY cwil BACK IN 2020
So if the info he gave was wrong then I just followed and got the same wrong answer. If anyone can verify that it works for them then others would have a somewhat simple way of getting their funds off of these things.
-Dave
I don't have a Sol Noctis Bull to test / check so I am using the information from the post about it.
THERE MAY BE SECURITY RISKS HERE SO MOVE YOUR COINS ASAP.
Step 1: Open up a web browser and 2 private tabs.
Step 1a: In tab #1 go to https://appdevtools.com/base58-encoder-decoder
Step 1b: In tab #2 to https://www.bitaddress.org
Step 2: DISCONNECT FROM THE INTERNET
Step 3: Verify that you are offline
Step 4: Verify offline again. Or not, it's your money.
Step 5: On the https://appdevtools.com/base58-encoder-decoder tab click on decode and treat output as HEX and put in the info from the coin
You can see it gives the same info as MJ quoted above. (Converts EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 to ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a)
Step 6: Go to the bitaddress.org tab and click on Wallet Details and put in the output HEX (ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a) where it says enter private key and then click view details. You should get the same info and the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a
NOTE I DID NOT TEST THIS WITH ANYTHING OTHER THEN WHAT WAS PRESENTED BY cwil BACK IN 2020
So if the info he gave was wrong then I just followed and got the same wrong answer. If anyone can verify that it works for them then others would have a somewhat simple way of getting their funds off of these things.
-Dave
EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.
It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.
Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:
I've swept the key, please provide an address to which you'd like to receive your funds.
It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.
Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:
Code:
const crypto = require('crypto');
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');
let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');
let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);
I've swept the key, please provide an address to which you'd like to receive your funds.
Can someone help.. I have 3 of these and do not know how to run this code.
Please PM me if you can help
Anybody have any with holograms intact for sale?? Man those are beautiful coins and holos. Looking for a bull and an eagle - not too worried about the load value myself or being able to redeem it as the value is small... I just love the design
With several thousand of these coins out there. I think any issues with compromised or swept coins is small and an isolated incident. But this is what happens when a corporation tries to capitalize on the popularity of bitcoin without fully understanding how to do it. Thats why their new coin it is only funded with 42 cents. Too bad because the eagle and bull are some of the best looking coins out there. If they could figure out the funding they could of had a great business. No issues with my coins, still funded, no issues as of now.
Hi,
Im owning one of those Bulls too. Watching that Thread for a long time, was there any reaction from TWC yet?
Im owning one of those Bulls too. Watching that Thread for a long time, was there any reaction from TWC yet?
FYI.. I posed the question about why they might have generated the keys the way they did in the Bitcoin Technical Support board- https://bitcointalksearch.org/topic/key-generation-question-5354705
EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.
It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.
Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:
I've swept the key, please provide an address to which you'd like to receive your funds.
It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.
Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:
Code:
const crypto = require('crypto');
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');
let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);
const bs58 = require('bs58');
let sha256 = crypto.createHash('sha256');
let privkey = bs58.decode('EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9').toString('hex');
console.log(privkey);
privkey = '80' + privkey + '01';
console.log(privkey);
let hash = sha256.update(Buffer.from(privkey, 'hex')).digest('hex');
console.log(hash);
sha256 = crypto.createHash('sha256');
let hash2 = sha256.update(Buffer.from(hash, 'hex')).digest('hex');
console.log(hash2);
let checksum = hash2.slice(0, 8);
console.log(checksum);
privkey += checksum;
console.log(privkey);
let encoded = bs58.encode(Buffer.from(privkey, 'hex'));
console.log(encoded);
I've swept the key, please provide an address to which you'd like to receive your funds.
Sats asked this before and I'm wondering the same....why would they make the keys this way? I don't understand a lick of any of this stuff cwil posted, but it seems very odd.. is there anything shady with this setup, or just a lazy/dumb way of doing it? If it confused a Mr Robot like Ghost, then I imagine those who don't know where to ask these questions may never redeem these things. I wonder if people have been reaching out to TWC asking for help, and what type of help is being provided.
TWC not providing a response still to this day about any of this is shady and is a piss poor way to service a serious issue with your customers. I wouldn't buy a dollar for a penny from these guys and hope no one else here gives them any business after all of this. I wrote this earlier in the thread but will again..TWC was running raffles on instagram at one point for these..I commented something like "why are you still running these with the compromised key issue ongoing". Deleted my comment..didn't respond or message me with even a simple "we understand your concerns but". Then a buddy commented and they removed the post. Shady!
I would consider these bulls sitting ducks. Maybe the key generation was made the way it was to confuse people to a point where they hoped to prevent as few sweeps as possible..as the average buyer of these who would try to redeem are likely people who know dick about btc/collectibles and wont have a clue what to do or who to ask and likely just give up or say "i'll deal with it later, it's not that much btc atm anyhow" ( kinda like how CryptoScratchCards and HyperionGold did ) while they make sure they sell all of their inventory and then they pull the rug? We've seen this kinda shit before, and if the company who generated the keys for the bulls is different than the eagles..then there is certainly no track record of trust..nor do we have a clue who generated them right? TWC is also NOT liable for any of the coins they don't sell directly let's not forget...and if you run a quick google search for the coin, there was a lot of retailers..
Omg! Very appreciated!
I’m very new to the crypto but I was able to sweep it now! This whole process is amazing 🤩
I’m very new to the crypto but I was able to sweep it now! This whole process is amazing 🤩
Hi, I’m having the same issue with my binary bull coin.
Have you found out how to redeem it?
Have you found out how to redeem it?
Solved, Please You can try solved by cwil :
EdLEZieDbChBMHJp858568iYuhcKWQNBWbBKeQMuckc9 is represented as ca76964390a3d7b99f0451a0a95a55a2098f9700cf6b0a2369a76b311d60427a in hex, and this is the private key for 13NgxJBSk2bwWd2W4cr4XQqNNQTmyoCM4a.
It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.
Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:
It looks like Sol Noctis took a private key in hex format and converted it to base58 without any of the necessary preprocessing to generate a WIF-encoded key. The 0x80 mainnet flag is not prepended, nor is the 0x01 flag to denote a compressed public key appended. Lastly the checksum is missing.
Some quick/dirty code follows to generate a proper WIF-encoded key from what you received:
Code:
...
*Note : Please never share your private key, or please ignore those people have PM you for solve that.
I received the coin in the mail yesterday and took some pictures a few moments ago. I don't receive newspapers, but let me know what other hoops I can jump through to prove this Bull coin is a scam.
https://i.imgur.com/11wRUNU.jpg
https://i.imgur.com/h7M6wr7.jpg
https://i.imgur.com/lanLrXL.jpg[/img[img]https://i.imgur.com/lanLrXL.jpg
https://i.imgur.com/bxCvY2d.jpg
https://i.imgur.com/hJeO3JE.jpg
https://i.imgur.com/11wRUNU.jpg
https://i.imgur.com/h7M6wr7.jpg
https://i.imgur.com/lanLrXL.jpg[/img[img]https://i.imgur.com/lanLrXL.jpg
https://i.imgur.com/bxCvY2d.jpg
https://i.imgur.com/hJeO3JE.jpg
Hi, I’m having the same issue with my binary bull coin.
Have you found out how to redeem it?
I’m confused at what you’re saying..you have coins where the funds where also swept? No they could not be fakes like those as fakes don’t actually have a hologram/ keys.
It looks like the 0.001 that was put back on the coin I originally purchased has now been swept on January 7th: https://www.blockchain.com/btc/address/1Lh975rtt1RwDJ1SHGX8mn1iHwe7kaVfMQ
I don't know if the coin is back with Lesbian Cow or still with TWC, but I'm more curious now with this new event.
Lesbian Cow on mobile here, the coin is not with me, it was shipped back to TWC some time ago.
I'm having a difficult time figuring out why someone could not purchase a loaded coin, peel it, clean it, and apply a new forged hologram with a fake private key. If done well, it would look like the fault of the coin creator, and I think that conclusion is likely where most of us in this thread are leaning.
I'm just trying to think this through, but if I were to want to steal the bitcoin value from loaded physicals, first I think I'd choose a common but high value coin. Something like the brass 1 BTC Casascius might be a good starting point. I could probably imitate the hologram design maybe with a high resolution scan or commission someone to do this. Custom security holograms seem to be readily available on various websites. I would not sweep the private keys, but rather provide incorrect keys for empty wallets in case someone does peel.
This topic is a bit uncomfortable for me as I don't want my holdings devalued in case it becomes apparent that forgeries are more common than we think. It's probably uncomfortable for a lot of us. I can't really think of a great way to deal with this, other than maybe one of the experts starting an authentication service. Escrow services probably wouldn't catch this assuming the holograms are high quality and applied well. I'm not sure grading companies would be able to catch this either, and they don't guarantee loaded value anyway.
At the moment I think this is a risk with which I am personally comfortable, but it has its limits. I would seriously consider peeling some of my multiple bitcoin coins if we start approaching $100k.
I'm just trying to think this through, but if I were to want to steal the bitcoin value from loaded physicals, first I think I'd choose a common but high value coin. Something like the brass 1 BTC Casascius might be a good starting point. I could probably imitate the hologram design maybe with a high resolution scan or commission someone to do this. Custom security holograms seem to be readily available on various websites. I would not sweep the private keys, but rather provide incorrect keys for empty wallets in case someone does peel.
This topic is a bit uncomfortable for me as I don't want my holdings devalued in case it becomes apparent that forgeries are more common than we think. It's probably uncomfortable for a lot of us. I can't really think of a great way to deal with this, other than maybe one of the experts starting an authentication service. Escrow services probably wouldn't catch this assuming the holograms are high quality and applied well. I'm not sure grading companies would be able to catch this either, and they don't guarantee loaded value anyway.
At the moment I think this is a risk with which I am personally comfortable, but it has its limits. I would seriously consider peeling some of my multiple bitcoin coins if we start approaching $100k.
Jump to: