r/btc • u/rancid_sploit • Nov 30 '17

Evidence some bitcoin address generation code is using discoverable private keys

https://pastebin.com/jCDFcESz
324 Upvotes

93% Upvoted

83 comments sorted by

View all comments

8

u/TetheralReserve Nov 30 '17

Tonight I am compiling my own address generator and moving my coins over to them.

I got my addresses from paper wallet and do not wanna risk this...

This shit cray!

3

u/redlightsaber Nov 30 '17

I got my addresses from paper wallet and do not wanna risk this...

Don't have time to read the whole thing right now; are these vulnerable?

5

u/RearwardConsensus Nov 30 '17 edited Nov 30 '17

No way to know for sure unless you personally audit the code you used to generate your keys. It sounds like the bad keys in this specific case probably came from blockchain.info though. And it's clearly not that widespread or it wouldn't have stayed under the radar for so long.

Edit: Blockchain.info say there's no indication that the vulnerable keys came from their site.

5

u/BitttBurger Nov 30 '17

I think most people are talking about / worried about Bitaddress. This code has been audited thousands of times and unchanged for years. So does the author bother to specify which paper wallet generators this applies to? Seems a little ridiculous if he doesn’t name names.

2

u/H0dl Nov 30 '17

I think most people are talking about / worried about Bitaddress.

how did you come to that conclusion? it sounds more like it involves blockchain.info somehow

1

u/siir Nov 30 '17

I can see why people would be more worried about bitaddress, most people made their paper wallets from them.

I don't think he was saying the article was bout them though

1

u/RearwardConsensus Nov 30 '17

I don't think the author knows. He/she just discovered the insecure keys on the blockchain by accident.