[{"data":1,"prerenderedAt":912},["ShallowReactive",2],{"navigation_docs":3,"-collections-bitaddress":368,"-collections-bitaddress-surround":839,"collection-facts-bitaddress":844,"dataset-count-hints--bitaddress---":567,"puzzle-page-bitaddress":858},[4,48,184,308],{"title":5,"path":6,"stem":7,"children":8,"icon":47},"Guide","\u002Fguide","1.guide\u002F01.index",[9,11,15,19,23,27,31,35,39,43],{"title":10,"path":6,"stem":7},"Getting Started",{"title":12,"path":13,"stem":14},"Puzzle records","\u002Fguide\u002Frecords","1.guide\u002F02.records",{"title":16,"path":17,"stem":18},"Registry","\u002Fguide\u002Fregistry","1.guide\u002F03.registry",{"title":20,"path":21,"stem":22},"Lookups and views","\u002Fguide\u002Flookups","1.guide\u002F04.lookups",{"title":24,"path":25,"stem":26},"Verification","\u002Fguide\u002Fverification","1.guide\u002F05.verification",{"title":28,"path":29,"stem":30},"Balances","\u002Fguide\u002Fbalances","1.guide\u002F06.balances",{"title":32,"path":33,"stem":34},"CLI","\u002Fguide\u002Fcli","1.guide\u002F07.cli",{"title":36,"path":37,"stem":38},"Agents","\u002Fguide\u002Fagents","1.guide\u002F08.agents",{"title":40,"path":41,"stem":42},"Custom collections","\u002Fguide\u002Fcustom","1.guide\u002F09.custom",{"title":44,"path":45,"stem":46},"Playground","\u002Fguide\u002Fplayground","1.guide\u002F10.playground","i-lucide-book-open",{"title":49,"path":50,"stem":51,"children":52,"icon":183},"Collections","\u002Fcollections","2.collections\u002F00.index",[53,55,59,63,67,71,75,79,83,87,91,95,99,103,107,111,115,119,123,127,131,135,139,143,147,151,155,159,163,167,171,175,179],{"title":54,"path":50,"stem":51},"Overview",{"title":56,"path":57,"stem":58},"Bitcoin puzzle transaction","\u002Fcollections\u002Fb1000","2.collections\u002F01.b1000",{"title":60,"path":61,"stem":62},"RushWallet contest","\u002Fcollections\u002Frushwallet","2.collections\u002F02.rushwallet",{"title":64,"path":65,"stem":66},"Zden's puzzles","\u002Fcollections\u002Fzden","2.collections\u002F03.zden",{"title":68,"path":69,"stem":70},"Arweave bounties","\u002Fcollections\u002Farweave","2.collections\u002F04.arweave",{"title":72,"path":73,"stem":74},"WarpWallet challenges","\u002Fcollections\u002Fwarp","2.collections\u002F05.warp",{"title":76,"path":77,"stem":78},"Hash collision bounties","\u002Fcollections\u002Fhash-collision","2.collections\u002F06.hash-collision",{"title":80,"path":81,"stem":82},"Ballet wallets","\u002Fcollections\u002Fballet","2.collections\u002F07.ballet",{"title":84,"path":85,"stem":86},"Bitimage","\u002Fcollections\u002Fbitimage","2.collections\u002F08.bitimage",{"title":88,"path":89,"stem":90},"Bitaps mnemonic challenge","\u002Fcollections\u002Fbitaps","2.collections\u002F09.bitaps",{"title":92,"path":93,"stem":94},"GSMG.io puzzle","\u002Fcollections\u002Fgsmg","2.collections\u002F10.gsmg",{"title":96,"path":97,"stem":98},"Bitcoin Movie Enigma","\u002Fcollections\u002Fmovie-enigma","2.collections\u002F11.movie-enigma",{"title":100,"path":101,"stem":102},"Ledger Donjon CTF","\u002Fcollections\u002Fledger-donjon","2.collections\u002F12.ledger-donjon",{"title":104,"path":105,"stem":106},"LuckyLurker","\u002Fcollections\u002Fluckylurker","2.collections\u002F13.luckylurker",{"title":108,"path":109,"stem":110},"Dug","\u002Fcollections\u002Fdug","2.collections\u002F14.dug",{"title":112,"path":113,"stem":114},"Genesis","\u002Fcollections\u002Fgenesis","2.collections\u002F15.genesis",{"title":116,"path":117,"stem":118},"TORCHED H34R7S Bitcoin Puzzle","\u002Fcollections\u002Fcoin-artist","2.collections\u002F16.coin-artist",{"title":120,"path":121,"stem":122},"10 ETH challenge","\u002Fcollections\u002Fmineshop","2.collections\u002F17.mineshop",{"title":124,"path":125,"stem":126},"Birthday quiz","\u002Fcollections\u002Fsatoshi-birthday-quiz","2.collections\u002F18.satoshi-birthday-quiz",{"title":128,"path":129,"stem":130},"Book quiz","\u002Fcollections\u002Fbook-quiz","2.collections\u002F19.book-quiz",{"title":132,"path":133,"stem":134},"Quizchain","\u002Fcollections\u002Fquizchain","2.collections\u002F20.quizchain",{"title":136,"path":137,"stem":138},"80-bit challenge","\u002Fcollections\u002F80-bit","2.collections\u002F21.80-bit",{"title":140,"path":141,"stem":142},"IAMABananaAMAA","\u002Fcollections\u002Fiamabananaamaa","2.collections\u002F22.iamabananaamaa",{"title":144,"path":145,"stem":146},"Wickex","\u002Fcollections\u002Fwickex","2.collections\u002F23.wickex",{"title":148,"path":149,"stem":150},"Picture puzzle","\u002Fcollections\u002Fpicture-puzzle","2.collections\u002F24.picture-puzzle",{"title":152,"path":153,"stem":154},"Mini-puzzles","\u002Fcollections\u002Fmini","2.collections\u002F25.mini",{"title":156,"path":157,"stem":158},"TeikhosBounty","\u002Fcollections\u002Fteikhos","2.collections\u002F26.teikhos",{"title":160,"path":161,"stem":162},"Brave New World","\u002Fcollections\u002Fbrave-new-world","2.collections\u002F27.brave-new-world",{"title":164,"path":165,"stem":166},"Wealth in Poetry","\u002Fcollections\u002Fwealth-in-poetry","2.collections\u002F28.wealth-in-poetry",{"title":168,"path":169,"stem":170},"Path to Greatness","\u002Fcollections\u002Fpath-to-greatness","2.collections\u002F29.path-to-greatness",{"title":172,"path":173,"stem":174},"Proof Of Writing","\u002Fcollections\u002Fproof-of-writing","2.collections\u002F30.proof-of-writing",{"title":176,"path":177,"stem":178},"Brute force","\u002Fcollections\u002Fbitaddress","2.collections\u002F31.bitaddress",{"title":180,"path":181,"stem":182},"Doge's Gambit","\u002Fcollections\u002Fdoges-gambit","2.collections\u002F32.doges-gambit","i-lucide-layers",{"title":185,"path":186,"stem":187,"children":188,"icon":307},"Authors","\u002Fauthors","3.authors\u002F00.index",[189,190,194,198,202,206,210,214,218,222,225,229,233,237,241,244,248,252,256,260,264,268,272,276,280,284,288,292,296,300,303],{"title":54,"path":186,"stem":187},{"title":191,"path":192,"stem":193},"AoiNakamoto","\u002Fauthors\u002Faoi-nakamoto","3.authors\u002F01.aoi-nakamoto",{"title":195,"path":196,"stem":197},"Bitaps","\u002Fauthors\u002Fbitaps","3.authors\u002F02.bitaps",{"title":199,"path":200,"stem":201},"Bobby Lee","\u002Fauthors\u002Fbobby-lee","3.authors\u002F03.bobby-lee",{"title":203,"path":204,"stem":205},"cain","\u002Fauthors\u002Fcain","3.authors\u002F04.cain",{"title":207,"path":208,"stem":209},"coin_artist","\u002Fauthors\u002Fcoin-artist","3.authors\u002F05.coin-artist",{"title":211,"path":212,"stem":213},"Corey Phillips","\u002Fauthors\u002Fcorey-phillips","3.authors\u002F06.corey-phillips",{"title":215,"path":216,"stem":217},"Crypto Puzzlers","\u002Fauthors\u002Fcryptopuzzlers","3.authors\u002F07.cryptopuzzlers",{"title":219,"path":220,"stem":221},"Dmitri Kryptokov","\u002Fauthors\u002Fdmitri-kryptokov","3.authors\u002F08.dmitri-kryptokov",{"title":108,"path":223,"stem":224},"\u002Fauthors\u002Fdug","3.authors\u002F09.dug",{"title":226,"path":227,"stem":228},"Genesis author","\u002Fauthors\u002Fgenesis-author","3.authors\u002F10.genesis-author",{"title":230,"path":231,"stem":232},"givesadvice4bitcoin","\u002Fauthors\u002Fgivesadvice4bitcoin","3.authors\u002F11.givesadvice4bitcoin",{"title":234,"path":235,"stem":236},"GSMG.io","\u002Fauthors\u002Fgsmg","3.authors\u002F12.gsmg",{"title":238,"path":239,"stem":240},"Guntis Vitolins","\u002Fauthors\u002Fguntis-vitolins","3.authors\u002F13.guntis-vitolins",{"title":140,"path":242,"stem":243},"\u002Fauthors\u002Fiamabananaamaa","3.authors\u002F14.iamabananaamaa",{"title":245,"path":246,"stem":247},"Johan Nygren","\u002Fauthors\u002Fjohan-nygren","3.authors\u002F15.johan-nygren",{"title":249,"path":250,"stem":251},"Justin Patterson","\u002Fauthors\u002Fjustin-patterson","3.authors\u002F16.justin-patterson",{"title":253,"path":254,"stem":255},"Keybase","\u002Fauthors\u002Fkeybase","3.authors\u002F17.keybase",{"title":257,"path":258,"stem":259},"klems","\u002Fauthors\u002Fklems","3.authors\u002F18.klems",{"title":261,"path":262,"stem":263},"kTimesG","\u002Fauthors\u002Fktimesg","3.authors\u002F19.ktimesg",{"title":265,"path":266,"stem":267},"Ledger Donjon","\u002Fauthors\u002Fledger-donjon","3.authors\u002F20.ledger-donjon",{"title":269,"path":270,"stem":271},"Paul Jones","\u002Fauthors\u002Fpaul-jones","3.authors\u002F21.paul-jones",{"title":273,"path":274,"stem":275},"Peter Todd","\u002Fauthors\u002Fpeter-todd","3.authors\u002F22.peter-todd",{"title":277,"path":278,"stem":279},"q","\u002Fauthors\u002Fq","3.authors\u002F23.q",{"title":281,"path":282,"stem":283},"RetiredCoder","\u002Fauthors\u002Fretired-coder","3.authors\u002F24.retired-coder",{"title":285,"path":286,"stem":287},"saatoshi_rising","\u002Fauthors\u002Fsaatoshi-rising","3.authors\u002F25.saatoshi-rising",{"title":289,"path":290,"stem":291},"stsh_n","\u002Fauthors\u002Fstsh-n","3.authors\u002F26.stsh-n",{"title":293,"path":294,"stem":295},"Tiamat","\u002Fauthors\u002Ftiamat","3.authors\u002F27.tiamat",{"title":297,"path":298,"stem":299},"Trithemius","\u002Fauthors\u002Ftrithemius","3.authors\u002F28.trithemius",{"title":144,"path":301,"stem":302},"\u002Fauthors\u002Fwickex","3.authors\u002F29.wickex",{"title":304,"path":305,"stem":306},"Zden","\u002Fauthors\u002Fzden","3.authors\u002F30.zden","i-lucide-users",{"title":309,"path":310,"stem":311,"children":312,"icon":367},"Solvers","\u002Fsolvers","4.solvers\u002F00.index",[313,314,318,322,326,330,333,337,341,345,349,353,357,361,364],{"title":54,"path":310,"stem":311},{"title":315,"path":316,"stem":317},"6loss","\u002Fsolvers\u002F6loss","4.solvers\u002F01.6loss",{"title":319,"path":320,"stem":321},"arpox","\u002Fsolvers\u002Farpox","4.solvers\u002F02.arpox",{"title":323,"path":324,"stem":325},"BlockCrushr Labs","\u002Fsolvers\u002Fblockcrushr-labs","4.solvers\u002F03.blockcrushr-labs",{"title":327,"path":328,"stem":329},"floflo777","\u002Fsolvers\u002Ffloflo777","4.solvers\u002F04.floflo777",{"title":140,"path":331,"stem":332},"\u002Fsolvers\u002Fiamabananaamaa","4.solvers\u002F05.iamabananaamaa",{"title":334,"path":335,"stem":336},"joachim","\u002Fsolvers\u002Fjoachim","4.solvers\u002F06.joachim",{"title":338,"path":339,"stem":340},"lefevre","\u002Fsolvers\u002Flefevre","4.solvers\u002F07.lefevre",{"title":342,"path":343,"stem":344},"lia","\u002Fsolvers\u002Flia","4.solvers\u002F08.lia",{"title":346,"path":347,"stem":348},"mmorsl","\u002Fsolvers\u002Fmmorsl","4.solvers\u002F09.mmorsl",{"title":350,"path":351,"stem":352},"Ori","\u002Fsolvers\u002Foritwoen","4.solvers\u002F10.oritwoen",{"title":354,"path":355,"stem":356},"pogo","\u002Fsolvers\u002Fpogo","4.solvers\u002F11.pogo",{"title":358,"path":359,"stem":360},"rabbidbird","\u002Fsolvers\u002Frabbidbird","4.solvers\u002F12.rabbidbird",{"title":281,"path":362,"stem":363},"\u002Fsolvers\u002Fretired-coder","4.solvers\u002F13.retired-coder",{"title":144,"path":365,"stem":366},"\u002Fsolvers\u002Fwickex","4.solvers\u002F14.wickex","i-lucide-trophy",{"id":369,"title":370,"body":371,"description":830,"extension":831,"links":832,"meta":833,"navigation":835,"path":177,"seo":836,"stem":178,"__hash__":838},"docs\u002F2.collections\u002F31.bitaddress.md","Brute force and the coins are yours",{"type":372,"value":373,"toc":815},"minimark",[374,391,394,398,403,406,409,413,421,437,440,444,459,462,469,473,476,479,482,486,715,720,742,746,753,757,770,774,783,787,793,797,804,808,811],[375,376,377,378,385,386,390],"p",{},"October 6, 2023, 11:50 UTC. q ",[379,380,384],"a",{"href":381,"rel":382},"https:\u002F\u002Fstacker.news\u002Fitems\u002F275973",[383],"nofollow","posts on Stacker News"," and the pitch is beautifully simple. Some years ago I made a paper wallet with a BIP38 passphrase. I don't remember the passphrase. Brute force it and the coins are yours. Then the encrypted key, the address, and where the passphrase should be, one honest line: ",[387,388,389],"code",{},"\u003Cfind out>",".",[375,392,393],{},"No riddle, no clues planted on purpose, no author smirking somewhere with the answer. The only one who ever knew the password is q from years ago, and q from years ago isn't answering.",[395,396],"collection-facts",{"collection":397},"bitaddress",[399,400,402],"h2",{"id":401},"why-give-it-away","Why give it away",[375,404,405],{},"Two reasons. q will \"never have time to do it\", being \"stuck in love life laugh\". Fair enough. And q wants to prove a point: a passphrase \"is not an extra security layer it is only extra step for donating the coins to every bitcoiner\".",[375,407,408],{},"Bold. Almost three years later the coins haven't moved, so right now the score is passphrase 1, every bitcoiner 0.",[399,410,412],{"id":411},"what-q-remembers","What q remembers",[375,414,415,416,420],{},"Not much, and that's the puzzle. The post and q's replies under it give ",[417,418],"dataset-count",{"of":419,"puzzle":397},"hints"," hints:",[422,423,424,428,431,434],"ul",{},[425,426,427],"li",{},"The passphrase is probably not more than 30 characters.",[425,429,430],{},"The wallet came from bitaddress.org.",[425,432,433],{},"q already tried the passwords from back then, so probably no special characters.",[425,435,436],{},"q used to glue 3 different passwords together to secure wallets, which lands around 30 characters. Probably no password manager. And q withdrew from this wallet once, so the passphrase can't be impossible.",[375,438,439],{},"That last one is the good one. Three old passwords in a row is a way smaller space than 30 random characters. Still huge, but huge in a shape a wordlist can actually chew on. If you know how people picked passwords around 2015, you're already ahead.",[399,441,443],{"id":442},"the-6pf-prefix","The 6Pf prefix",[375,445,446,447,450,451,454,455,458],{},"An hour and a half in, a commenter called 0fje0 spots it: the key starts with ",[387,448,449],{},"6Pf",". In BIP38 that means EC multiply mode, an uncompressed key, no lot or sequence number. The payload agrees, flag bytes ",[387,452,453],{},"0x0143"," and ",[387,456,457],{},"0x00",". So the passphrase first became an intermediate code and the key was built from that, not a plain WIF encrypted afterwards.",[375,460,461],{},"Does it help? Honestly, no. Every guess still goes through scrypt with N=16384, r=8, p=8 before you learn anything, and that's slow on purpose. BIP38 was built to make exactly this kind of fun expensive.",[375,463,464,465,468],{},"One free check though. The payload carries the first 4 bytes of the address's double SHA-256, and they match ",[387,466,467],{},"1J7BVe…",". So the key and the address on the paper really belong together. Worth knowing before you set a GPU on fire.",[399,470,472],{"id":471},"what-the-chain-shows","What the chain shows",[375,474,475],{},"The coins are older than the post. Two deposits in the same block on June 2, 2015, 0.01337 BTC and 0.02999 BTC. Then on June 12, 2016 somebody who still knew the passphrase spent both: 0.037963 BTC out, 0.0001 to fees, 0.005297 BTC back as change to the same address.",[375,477,478],{},"That's the withdrawal q mentions. It's also the only proof that this passphrase ever lived in a human head.",[375,480,481],{},"Since then, silence. 529,700 sat in the same spot since 2016, waiting for someone with a good wordlist and a lot of patience.",[399,483,485],{"id":484},"what-the-bitaddress-record-carries","What the bitaddress record carries",[487,488,494],"pre",{"className":489,"code":490,"filename":491,"language":492,"meta":493,"style":493},"language-ts shiki shiki-themes puzzles puzzles puzzles","export const bruteForce = bitcoinPuzzle({\n  id: \"bitaddress\",\n  address: p2pkh(\"1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou\", \"bba564d9…07ffd6e3\"),\n  sourceUrl: THREAD,\n  startedAt: \"2023-10-06 11:50:09\",\n  pubkey: uncompressed(\"04f7af13…d75bac30ac\"),\n  key: encryptedWif(\"6PfQTphCYc1Fee19uPz2pmou5RVBDVgw8VcrPfGLos4ktUnARdiFLYhcNU\"),\n  prize: 0.005297,\n  hints: [official(\"I suspect the passphrase is not more than 30 characters.\", THREAD, …), community(\"The private key starts with '6Pf', though. …\", comment(\"276026\"), …), …],\n  transactions: [funding(\u002F* 2015-06-02 *\u002F), increase(\u002F* same block *\u002F), decrease(\u002F* 2016-06-12 *\u002F)],\n  assets: assets({ puzzle: \"puzzle.png\", sourceUrl: PICTURE }),\n});\n","src\u002Fcollections\u002Fbitaddress.ts","ts","",[387,495,496,522,535,559,565,576,592,608,614,652,691,709],{"__ignoreMap":493},[497,498,501,505,508,512,515,519],"span",{"class":499,"line":500},"line",1,[497,502,504],{"class":503},"skH_V","export",[497,506,507],{"class":503}," const",[497,509,511],{"class":510},"s38Sx"," bruteForce ",[497,513,514],{"class":503},"=",[497,516,518],{"class":517},"sK71F"," bitcoinPuzzle",[497,520,521],{"class":510},"({\n",[497,523,525,528,532],{"class":499,"line":524},2,[497,526,527],{"class":510},"  id: ",[497,529,531],{"class":530},"shU9J","\"bitaddress\"",[497,533,534],{"class":510},",\n",[497,536,538,541,544,547,550,553,556],{"class":499,"line":537},3,[497,539,540],{"class":510},"  address: ",[497,542,543],{"class":517},"p2pkh",[497,545,546],{"class":510},"(",[497,548,549],{"class":530},"\"1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou\"",[497,551,552],{"class":510},", ",[497,554,555],{"class":530},"\"bba564d9…07ffd6e3\"",[497,557,558],{"class":510},"),\n",[497,560,562],{"class":499,"line":561},4,[497,563,564],{"class":510},"  sourceUrl: THREAD,\n",[497,566,568,571,574],{"class":499,"line":567},5,[497,569,570],{"class":510},"  startedAt: ",[497,572,573],{"class":530},"\"2023-10-06 11:50:09\"",[497,575,534],{"class":510},[497,577,579,582,585,587,590],{"class":499,"line":578},6,[497,580,581],{"class":510},"  pubkey: ",[497,583,584],{"class":517},"uncompressed",[497,586,546],{"class":510},[497,588,589],{"class":530},"\"04f7af13…d75bac30ac\"",[497,591,558],{"class":510},[497,593,595,598,601,603,606],{"class":499,"line":594},7,[497,596,597],{"class":510},"  key: ",[497,599,600],{"class":517},"encryptedWif",[497,602,546],{"class":510},[497,604,605],{"class":530},"\"6PfQTphCYc1Fee19uPz2pmou5RVBDVgw8VcrPfGLos4ktUnARdiFLYhcNU\"",[497,607,558],{"class":510},[497,609,611],{"class":499,"line":610},8,[497,612,613],{"class":510},"  prize: 0.005297,\n",[497,615,617,620,623,625,628,631,634,636,639,641,644,646,649],{"class":499,"line":616},9,[497,618,619],{"class":510},"  hints: [",[497,621,622],{"class":517},"official",[497,624,546],{"class":510},[497,626,627],{"class":530},"\"I suspect the passphrase is not more than 30 characters.\"",[497,629,630],{"class":510},", THREAD, …), ",[497,632,633],{"class":517},"community",[497,635,546],{"class":510},[497,637,638],{"class":530},"\"The private key starts with '6Pf', though. …\"",[497,640,552],{"class":510},[497,642,643],{"class":517},"comment",[497,645,546],{"class":510},[497,647,648],{"class":530},"\"276026\"",[497,650,651],{"class":510},"), …), …],\n",[497,653,655,658,661,663,667,670,673,675,678,680,683,685,688],{"class":499,"line":654},10,[497,656,657],{"class":510},"  transactions: [",[497,659,660],{"class":517},"funding",[497,662,546],{"class":510},[497,664,666],{"class":665},"scIB-","\u002F* 2015-06-02 *\u002F",[497,668,669],{"class":510},"), ",[497,671,672],{"class":517},"increase",[497,674,546],{"class":510},[497,676,677],{"class":665},"\u002F* same block *\u002F",[497,679,669],{"class":510},[497,681,682],{"class":517},"decrease",[497,684,546],{"class":510},[497,686,687],{"class":665},"\u002F* 2016-06-12 *\u002F",[497,689,690],{"class":510},")],\n",[497,692,694,697,700,703,706],{"class":499,"line":693},11,[497,695,696],{"class":510},"  assets: ",[497,698,699],{"class":517},"assets",[497,701,702],{"class":510},"({ puzzle: ",[497,704,705],{"class":530},"\"puzzle.png\"",[497,707,708],{"class":510},", sourceUrl: PICTURE }),\n",[497,710,712],{"class":499,"line":711},12,[497,713,714],{"class":510},"});\n",[716,717,719],"h3",{"id":718},"an-encrypted-key-and-no-passphrase","An encrypted key and no passphrase",[375,721,722,725,726,729,730,733,734,737,738,741],{},[387,723,724],{},"encryptedWif()"," with the payload alone. No passphrase option, because nobody has one, q included. ",[387,727,728],{},"puzzles verify bitaddress"," answers ",[387,731,732],{},"SKIP"," with ",[387,735,736],{},"WIF is encrypted",", same as the unsolved ",[379,739,740],{"href":81},"Ballet"," wallet. The day someone cracks it, the passphrase goes into that same call and verify finally gets to do its job.",[716,743,745],{"id":744},"the-public-key-was-never-a-secret","The public key was never a secret",[375,747,748,749,752],{},"The 2016 spend signed with the uncompressed key, so ",[387,750,751],{},"pubkey"," comes straight from that input. Zero help against scrypt. The record just likes to know things.",[716,754,756],{"id":755},"started-at-the-post-funded-long-before","Started at the post, funded long before",[375,758,759,762,763,765,766,769],{},[387,760,761],{},"startedAt"," is the post, the moment the passphrase became everybody's problem. The two 2015 deposits keep their dates, the 2016 spend is a ",[387,764,682],{}," of what left the address, and ",[387,767,768],{},"prize"," is the 0.005297 BTC that was there on the day of the post.",[716,771,773],{"id":772},"why-bitaddress","Why bitaddress",[375,775,776,777,780,781,390],{},"The post's title is great, and it's the page's title too. As an id it's useless though. Half this dataset is brute force of some kind, so ",[387,778,779],{},"brute-force"," would point at everything and nothing. What only this puzzle has is where the wallet came from: bitaddress.org, named by q in the post. So the id is ",[387,782,397],{},[716,784,786],{"id":785},"the-picture","The picture",[375,788,789,792],{},[387,790,791],{},"assets\u002Fbitaddress\u002Fpuzzle.png"," is the paper wallet as Imgur serves it: address on the left, encrypted key on the right, both QR codes. Top left there's the attacker success formula from section 11 of the Bitcoin whitepaper. Nice decoration for a wallet whose only attacker is its owner's memory.",[716,794,796],{"id":795},"the-thread-is-archived","The thread is archived",[375,798,799,800,803],{},"Stacker News is doing fine, but the hints live in comments, and comments have a way of disappearing. So the repo keeps its own copy. ",[387,801,802],{},"assets\u002Fsources\u002Fbitaddress\u002F"," has the post and every comment, checked against a Wayback capture from February 2026.",[399,805,807],{"id":806},"the-bitaddress-record","The bitaddress record",[809,810],"puzzle-page",{"puzzle":397},[812,813,814],"style",{},"html pre.shiki code .skH_V, html code.shiki .skH_V{--shiki-light:var(--shiki-token-keyword);--shiki-default:var(--shiki-token-keyword);--shiki-dark:var(--shiki-token-keyword)}html pre.shiki code .s38Sx, html code.shiki .s38Sx{--shiki-light:var(--ui-text-highlighted);--shiki-default:var(--ui-text-highlighted);--shiki-dark:var(--ui-text-highlighted)}html pre.shiki code .sK71F, html code.shiki .sK71F{--shiki-light:var(--shiki-token-function);--shiki-default:var(--shiki-token-function);--shiki-dark:var(--shiki-token-function)}html pre.shiki code .shU9J, html code.shiki .shU9J{--shiki-light:var(--shiki-token-string);--shiki-default:var(--shiki-token-string);--shiki-dark:var(--shiki-token-string)}html pre.shiki code .scIB-, html code.shiki .scIB-{--shiki-light:var(--shiki-token-comment);--shiki-default:var(--shiki-token-comment);--shiki-dark:var(--shiki-token-comment)}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":493,"searchDepth":524,"depth":524,"links":816},[817,818,819,820,821,829],{"id":401,"depth":524,"text":402},{"id":411,"depth":524,"text":412},{"id":442,"depth":524,"text":443},{"id":471,"depth":524,"text":472},{"id":484,"depth":524,"text":485,"children":822},[823,824,825,826,827,828],{"id":718,"depth":537,"text":719},{"id":744,"depth":537,"text":745},{"id":755,"depth":537,"text":756},{"id":772,"depth":537,"text":773},{"id":785,"depth":537,"text":786},{"id":795,"depth":537,"text":796},{"id":806,"depth":524,"text":807},"A bitaddress.org paper wallet whose owner forgot the BIP38 passphrase and gave the coins to whoever guesses it. Posted on Stacker News in October 2023 and still locked","md",null,{"icon":834},"i-lucide-hammer",{"title":176},{"title":837,"description":830},"Brute force and the coins are yours: a BIP38 paper wallet nobody can open, its owner included","h9YM-SrD3P7B9p4yMo2u6EW8RYClG6h2xzV_M0Qtq34",[840,842],{"title":172,"path":173,"stem":174,"description":841,"children":-1},"An essay about the eCash community with twelve seed words on its diagonal. Nobody read it that way for eighteen months and the prize grew to 30 million XEC before it went.",{"title":180,"path":181,"stem":182,"description":843,"children":-1},"Doge's Gambit by Crypto Puzzlers hid an Ether key and a Dogecoin key in one 68 second video of a chess board. Both prizes were claimed in 2021 and the author published both solutions",{"key":397,"author":277,"authorKey":277,"authorUrl":845,"total":500,"statuses":846,"chains":847,"prize":849,"unsolvedPrize":851,"withPubkey":500,"withKey":500,"firstStarted":852,"lastStarted":852,"hints":853,"ticks":854,"position":567,"registered":856,"dataVersion":857},"https:\u002F\u002Fstacker.news\u002Fq",{"unsolved":500},[848],"bitcoin",{"BTC":850},0.005297,{"BTC":850},"2023-10-06 11:50:09",[],[855],"unsolved",32,"2aa8e52b2417",{"view":859,"previous":-1,"next":-1,"position":500,"total":500},{"id":397,"collection":397,"chain":848,"status":855,"address":860,"kind":543,"hash160":861,"redeemScript":-1,"prize":862,"prizeAmount":850,"currency":-1,"startedAt":852,"solvedAt":-1,"solveTime":-1,"bits":-1,"range":-1,"pubkey":863,"pubkeyFormat":584,"secret":864,"keyLiteral":865,"verdict":866,"detail":736,"explorer":867,"source":381,"transactions":537,"tool":868,"name":493,"preGenesis":869,"derived":869,"keyRows":870,"transactionRows":875,"assets":890,"assetSource":894,"stages":895,"hints":896,"solverName":-1,"solverKey":-1,"solverUrl":-1,"claimUrl":-1,"json":911},"1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou","bba564d9113760ba944ffce28dc3126d07ffd6e3","0.005297 BTC","04f7af13c4fda2f920dbd8ebc8d2cc87cdc6674a7beda95a402ab83dd7e952597aeebdb76b2b4bc15771c57eb48568b2a8fa83219f9fa53519aaef5cd75bac30ac","encrypted","encryptedWif(\"6PfQTphCYc1Fee19uPz2pmou5RVBDVgw8VcrPfGLos4ktUnARdiFLYhcNU\")","unavailable","https:\u002F\u002Fblockstream.info\u002Faddress\u002F1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou","bitaddress\tunsolved\t0.005297 BTC\t1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou\nchain: bitcoin  address kind: p2pkh\nhash160: bba564d9113760ba944ffce28dc3126d07ffd6e3\npublic key: 04f7af13c4fda2f920dbd8ebc8d2cc87cdc6674a7beda95a402ab83dd7e952597aeebdb76b2b4bc15771c57eb48568b2a8fa83219f9fa53519aaef5cd75bac30ac (uncompressed)\nprivate key: 6PfQTphCYc1Fee19uPz2pmou5RVBDVgw8VcrPfGLos4ktUnARdiFLYhcNU (bip38)\nstarted: 2023-10-06 11:50:09\ntransactions: 3\n\tfunding\t2015-06-02 21:14:42\t0.01337 BTC\tcbba0edea0808f1a36a4f84663b9b0ef065939759f7257a80df2b14f773910ca\n\tincrease\t2015-06-02 21:14:42\t0.02999 BTC\tfd82c2f779c4cf8e56e10430d7ae45ace0025090600ae2fd3fd3d467d9ebf608\n\tdecrease\t2016-06-12 19:15:59\t0.038063 BTC\tfa938636d8b5f0f82a7f88af68dfaf0973436525cd0d524a823fe4409c17f3c9\nasset: https:\u002F\u002Fraw.githubusercontent.com\u002Fagntn\u002Fpuzzles\u002Fmain\u002Fassets\u002Fbitaddress\u002Fpuzzle.png\nasset source: https:\u002F\u002Fi.imgur.com\u002F3RSb8MH.png\nhints: 5\n\tofficial\t2023-10-06\tI suspect the passphrase is not more than 30 characters.\tsource: https:\u002F\u002Fstacker.news\u002Fitems\u002F275973\n\tofficial\t2023-10-06\tWhich i generated on this site https:\u002F\u002Fwww.bitaddress.org\u002F\tsource: https:\u002F\u002Fstacker.news\u002Fitems\u002F275973\n\tofficial\t2023-10-06\tI don't remember, I have tested my passwords I used during that time, so probably it is not with special characters\tsource: https:\u002F\u002Fstacker.news\u002Fitems\u002F276117\n\tofficial\t2023-10-06\tMost likely I did not use a passphrase of the length 30. But I remeber that I used to combine 3 different passwords to secure wallets which is about that length. I have withdrawn funds from the wallet once so it cannot be an imposible passpharse and most likely I did not used a password manager for it.\tsource: https:\u002F\u002Fstacker.news\u002Fitems\u002F276305\n\tcommunity\t2023-10-06\tThe private key starts with '6Pf', though. That gives you some indication of the encryption algorithm used: EC multiply, no compression, no lot\u002Fsequence numbers, according to BIP38.\tsource: https:\u002F\u002Fstacker.news\u002Fitems\u002F276026\nexplorer: https:\u002F\u002Fblockstream.info\u002Faddress\u002F1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou\nsource: https:\u002F\u002Fstacker.news\u002Fitems\u002F275973",false,[871],{"label":872,"value":873,"mono":874},"BIP38 payload","6PfQTphCYc1Fee19uPz2pmou5RVBDVgw8VcrPfGLos4ktUnARdiFLYhcNU",true,[876,881,885],{"type":660,"txid":877,"date":878,"amount":879,"url":880},"cbba0edea0808f1a36a4f84663b9b0ef065939759f7257a80df2b14f773910ca","2015-06-02 21:14:42","0.01337 BTC","https:\u002F\u002Fblockstream.info\u002Ftx\u002Fcbba0edea0808f1a36a4f84663b9b0ef065939759f7257a80df2b14f773910ca",{"type":672,"txid":882,"date":878,"amount":883,"url":884},"fd82c2f779c4cf8e56e10430d7ae45ace0025090600ae2fd3fd3d467d9ebf608","0.02999 BTC","https:\u002F\u002Fblockstream.info\u002Ftx\u002Ffd82c2f779c4cf8e56e10430d7ae45ace0025090600ae2fd3fd3d467d9ebf608",{"type":682,"txid":886,"date":887,"amount":888,"url":889},"fa938636d8b5f0f82a7f88af68dfaf0973436525cd0d524a823fe4409c17f3c9","2016-06-12 19:15:59","0.038063 BTC","https:\u002F\u002Fblockstream.info\u002Ftx\u002Ffa938636d8b5f0f82a7f88af68dfaf0973436525cd0d524a823fe4409c17f3c9",[891],{"label":892,"path":791,"url":893,"image":874},"puzzle","\u002Fassets\u002Fbitaddress\u002Fpuzzle.png","https:\u002F\u002Fi.imgur.com\u002F3RSb8MH.png",[],[897,900,902,905,908],{"kind":622,"text":898,"source":381,"date":899,"shared":869},"I suspect the passphrase is not more than 30 characters.","2023-10-06",{"kind":622,"text":901,"source":381,"date":899,"shared":869},"Which i generated on this site https:\u002F\u002Fwww.bitaddress.org\u002F",{"kind":622,"text":903,"source":904,"date":899,"shared":869},"I don't remember, I have tested my passwords I used during that time, so probably it is not with special characters","https:\u002F\u002Fstacker.news\u002Fitems\u002F276117",{"kind":622,"text":906,"source":907,"date":899,"shared":869},"Most likely I did not use a passphrase of the length 30. But I remeber that I used to combine 3 different passwords to secure wallets which is about that length. I have withdrawn funds from the wallet once so it cannot be an imposible passpharse and most likely I did not used a password manager for it.","https:\u002F\u002Fstacker.news\u002Fitems\u002F276305",{"kind":633,"text":909,"source":910,"date":899,"shared":869},"The private key starts with '6Pf', though. That gives you some indication of the encryption algorithm used: EC multiply, no compression, no lot\u002Fsequence numbers, according to BIP38.","https:\u002F\u002Fstacker.news\u002Fitems\u002F276026","{\n  \"id\": \"bitaddress\",\n  \"chain\": \"bitcoin\",\n  \"address\": {\n    \"value\": \"1J7BVeP8JK4op2X3GN3Hy7xkTnGnQTMpou\",\n    \"kind\": \"p2pkh\",\n    \"hash160\": \"bba564d9113760ba944ffce28dc3126d07ffd6e3\"\n  },\n  \"status\": \"unsolved\",\n  \"pubkey\": {\n    \"value\": \"04f7af13c4fda2f920dbd8ebc8d2cc87cdc6674a7beda95a402ab83dd7e952597aeebdb76b2b4bc15771c57eb48568b2a8fa83219f9fa53519aaef5cd75bac30ac\",\n    \"format\": \"uncompressed\"\n  },\n  \"key\": {\n    \"wif\": {\n      \"encrypted\": \"6PfQTphCYc1Fee19uPz2pmou5RVBDVgw8VcrPfGLos4ktUnARdiFLYhcNU\"\n    }\n  },\n  \"prize\": 0.005297,\n  \"start_date\": \"2023-10-06 11:50:09\",\n  \"source_url\": \"https:\u002F\u002Fstacker.news\u002Fitems\u002F275973\",\n  \"transactions\": [\n    {\n      \"tx_type\": \"funding\",\n      \"txid\": \"cbba0edea0808f1a36a4f84663b9b0ef065939759f7257a80df2b14f773910ca\",\n      \"date\": \"2015-06-02 21:14:42\",\n      \"amount\": 0.01337\n    },\n    {\n      \"tx_type\": \"increase\",\n      \"txid\": \"fd82c2f779c4cf8e56e10430d7ae45ace0025090600ae2fd3fd3d467d9ebf608\",\n      \"date\": \"2015-06-02 21:14:42\",\n      \"amount\": 0.02999\n    },\n    {\n      \"tx_type\": \"decrease\",\n      \"txid\": \"fa938636d8b5f0f82a7f88af68dfaf0973436525cd0d524a823fe4409c17f3c9\",\n      \"date\": \"2016-06-12 19:15:59\",\n      \"amount\": 0.038063\n    }\n  ],\n  \"assets\": {\n    \"puzzle\": \"puzzle.png\",\n    \"source_url\": \"https:\u002F\u002Fi.imgur.com\u002F3RSb8MH.png\"\n  },\n  \"hints\": [\n    {\n      \"kind\": \"official\",\n      \"text\": \"I suspect the passphrase is not more than 30 characters.\",\n      \"source\": \"https:\u002F\u002Fstacker.news\u002Fitems\u002F275973\",\n      \"date\": \"2023-10-06\"\n    },\n    {\n      \"kind\": \"official\",\n      \"text\": \"Which i generated on this site https:\u002F\u002Fwww.bitaddress.org\u002F\",\n      \"source\": \"https:\u002F\u002Fstacker.news\u002Fitems\u002F275973\",\n      \"date\": \"2023-10-06\"\n    },\n    {\n      \"kind\": \"official\",\n      \"text\": \"I don't remember, I have tested my passwords I used during that time, so probably it is not with special characters\",\n      \"source\": \"https:\u002F\u002Fstacker.news\u002Fitems\u002F276117\",\n      \"date\": \"2023-10-06\"\n    },\n    {\n      \"kind\": \"official\",\n      \"text\": \"Most likely I did not use a passphrase of the length 30. But I remeber that I used to combine 3 different passwords to secure wallets which is about that length. I have withdrawn funds from the wallet once so it cannot be an imposible passpharse and most likely I did not used a password manager for it.\",\n      \"source\": \"https:\u002F\u002Fstacker.news\u002Fitems\u002F276305\",\n      \"date\": \"2023-10-06\"\n    },\n    {\n      \"kind\": \"community\",\n      \"text\": \"The private key starts with '6Pf', though. That gives you some indication of the encryption algorithm used: EC multiply, no compression, no lot\u002Fsequence numbers, according to BIP38.\",\n      \"source\": \"https:\u002F\u002Fstacker.news\u002Fitems\u002F276026\",\n      \"date\": \"2023-10-06\"\n    }\n  ]\n}",1790716844358]