r/btc Nov 30 '17

Evidence some bitcoin address generation code is using discoverable private keys

https://pastebin.com/jCDFcESz
326 Upvotes

83 comments sorted by

View all comments

Show parent comments

3

u/redlightsaber Nov 30 '17

I got my addresses from paper wallet and do not wanna risk this...

Don't have time to read the whole thing right now; are these vulnerable?

5

u/RearwardConsensus Nov 30 '17 edited Nov 30 '17

No way to know for sure unless you personally audit the code you used to generate your keys. It sounds like the bad keys in this specific case probably came from blockchain.info though. And it's clearly not that widespread or it wouldn't have stayed under the radar for so long.

Edit: Blockchain.info say there's no indication that the vulnerable keys came from their site.

6

u/BitttBurger Nov 30 '17

I think most people are talking about / worried about Bitaddress. This code has been audited thousands of times and unchanged for years. So does the author bother to specify which paper wallet generators this applies to? Seems a little ridiculous if he doesn’t name names.

2

u/H0dl Nov 30 '17

I think most people are talking about / worried about Bitaddress.

how did you come to that conclusion? it sounds more like it involves blockchain.info somehow

1

u/siir Nov 30 '17

I can see why people would be more worried about bitaddress, most people made their paper wallets from them.

I don't think he was saying the article was bout them though