4 ms·

I mean, I found 10 used wallets not within 1000 pages of the first nor last page of his website in roughly 5 minutes. I’m fully aware behind the math of findin

by s5300 5y ago

I mean, I found 10 used wallets not within 1000 pages of the first nor last page of his website in roughly 5 minutes. I’m fully aware behind the math of finding a wallet actually holding anything… but I was fairly weirded out to come across 10 wallets that quickly. Most had their last txn out roughly 2019.

teaearlgraycold 5y ago
You didn’t come upon those wallets by chance. Whatever rules the site uses to order wallets isn’t unique and some other (insecure) wallet generator uses the same technique. That or someone is actually using the site to come up with wallet keys.
hjorthjort 5y ago
I've noticed that there are a few hardcoded ones on the final page, where the account exists and the key is wrong. I'd say odds are that the website is wrong, but you can always load those keys in a wallet and see if they give you control over the actual address. If that works, I'd assume it's the case that some people have used weak keys (for example, a popular Ethereum wallet would actually generate 256 bits of entropy but accidentally truncate it to 32 bits in an operation), and any funds in those wallets will have been snagged long ago. Point being: generate a private key properly, and no one will ever find it. EDIT: I realize this is another page then the one I've seen previously, but I think the same idea applies. That one had support for Ethereum, too, and on the final page was an account with a balance.
- JimWestergren 5y ago
  You must mean this: https://keys.lol/ethereum/904625697166532776746648320380374280100293470930272690489102837043110636675 https://keys.lol/ethereum/9046256971665327767466483203803742...
  - tjungblut 5y ago
    wow, the private key with 10.28 eth can't be imported anywhere. The others work and are already being emptied. One way to lose your money for sure. EDIT: the aforementioned wallet can also be found as the 0x00 wallet on the very first page. Interesting collision? EDIT2: it's hardcoded https://github.com/SjorsO/keys-generator/blob/master/ethereum-keys.go#L16-L48 https://github.com/SjorsO/keys-generator/blob/master/ethereu...
    - pokepim 5y ago
      Why it cant be imported anywhere?
      - tjungblut 5y ago
        it's the maximum private key https://github.com/ethereum/go-ethereum/blob/master/crypto/crypto.go#L49 https://github.com/ethereum/go-ethereum/blob/master/crypto/c... - so the public key is actually just a example and not the real public key for that private key.
stavros 5y ago
Can you post the page?
- s5300 5y ago
  A bit too busy to navigate that (just got an iPhone for the first time in my life, not good at navigating safari history in bulk yet) But one of them was 1337, another some variant of 420-420xxx +-2 pages, another some variant of 1000000-1000000,xxx,xxx,xxx +-2 pages on those. I can tell you there was nothing on 8008135 though
  - bspammer 5y ago
    So not random at all, other people had exactly the same idea as you and picked the same numbers. I would have been more surprised to see zero traffic at those addresses to be honest.
    - s5300 5y ago
      I’m confused. There’s a singular emptied walled on 1337 and nothing else +-25 at a minimum from it, I didn’t look any further. You’re telling me that other people had exactly the same idea, but out of everyone in crypto, ever, it was only a singular person? That seems more outlandish than the fact there’s one there IMO.

by s5300 5y ago

teaearlgraycold 5y ago

You didn’t come upon those wallets by chance. Whatever rules the site uses to order wallets isn’t unique and some other (insecure) wallet generator uses the same technique. That or someone is actually using the site to come up with wallet keys.

hjorthjort 5y ago

I've noticed that there are a few hardcoded ones on the final page, where the account exists and the key is wrong. I'd say odds are that the website is wrong, but you can always load those keys in a wallet and see if they give you control over the actual address. If that works, I'd assume it's the case that some people have used weak keys (for example, a popular Ethereum wallet would actually generate 256 bits of entropy but accidentally truncate it to 32 bits in an operation), and any funds in those wallets will have been snagged long ago. Point being: generate a private key properly, and no one will ever find it. EDIT: I realize this is another page then the one I've seen previously, but I think the same idea applies. That one had support for Ethereum, too, and on the final page was an account with a balance.

JimWestergren 5y ago
You must mean this: https://keys.lol/ethereum/904625697166532776746648320380374280100293470930272690489102837043110636675 https://keys.lol/ethereum/9046256971665327767466483203803742...
- tjungblut 5y ago
  wow, the private key with 10.28 eth can't be imported anywhere. The others work and are already being emptied. One way to lose your money for sure. EDIT: the aforementioned wallet can also be found as the 0x00 wallet on the very first page. Interesting collision? EDIT2: it's hardcoded https://github.com/SjorsO/keys-generator/blob/master/ethereum-keys.go#L16-L48 https://github.com/SjorsO/keys-generator/blob/master/ethereu...
  - pokepim 5y ago
    Why it cant be imported anywhere?
    - tjungblut 5y ago
      it's the maximum private key https://github.com/ethereum/go-ethereum/blob/master/crypto/crypto.go#L49 https://github.com/ethereum/go-ethereum/blob/master/crypto/c... - so the public key is actually just a example and not the real public key for that private key.

stavros 5y ago

Can you post the page?

s5300 5y ago
A bit too busy to navigate that (just got an iPhone for the first time in my life, not good at navigating safari history in bulk yet) But one of them was 1337, another some variant of 420-420xxx +-2 pages, another some variant of 1000000-1000000,xxx,xxx,xxx +-2 pages on those. I can tell you there was nothing on 8008135 though
- bspammer 5y ago
  So not random at all, other people had exactly the same idea as you and picked the same numbers. I would have been more surprised to see zero traffic at those addresses to be honest.
  - s5300 5y ago
    I’m confused. There’s a singular emptied walled on 1337 and nothing else +-25 at a minimum from it, I didn’t look any further. You’re telling me that other people had exactly the same idea, but out of everyone in crypto, ever, it was only a singular person? That seems more outlandish than the fact there’s one there IMO.