random

Satoshi Nakamoto

Bitcoin

when

Read

<p><strong>Randomly guessing a long Bitcoin wallet password is as unlikely as winning the Powerball 100 times in a row. But there are some do-good hackers whove made a living doing exactly that.</strong></p>
<p>Two years ago, Michael contacted a team of white hat hackers with a near-impossible request.</p>
<p>Could they help him brute-force attack the lost password to his decade-old Bitcoin wallet, which now holds the equivalent of $3 million in Bitcoin?</p>
<p>The catch? Michaels lost password is 20 characters long, and he has no clue what it could be because he used a password generator.</p>
<figure class="wp-block-image alignleft size-full">
 <img decoding="async" width="503" height="337" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/07/Joe-Grand.jpg" alt="Meet the hackers who can help get your crypto life savings back" class="wp-image-34305" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/07/Joe-Grand.jpg 503w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/07/Joe-Grand-300x201.jpg 300w" sizes="(max-width: 503px) 100vw, 503px">
 <figcaption class="wp-element-caption">
  <em>Nobody would take on a brute-forcing project of this scale, says Grand. (YouTube)</em>
 </figcaption>
</figure>
<p>The task was so monumental that Offspec.io co-founder, lead hacker and YouTuber Joe Grand turned down the job.</p>
<p>If we had to try every possible password combination, thats more than 100 trillion times the number of water drops in the entire world, <a href="https://www.youtube.com/watch?v=o5IySpAkThg" target="_blank" rel="nofollow">explained</a> Grand in a YouTube video about the case.&nbsp;</p>
<p>But in a stroke of luck a year later, Grand and his team stumbled across a way to significantly trim the odds.&nbsp;</p>
<p>It turns out that Michaels password generator, RoboForm, had a long-since patched vulnerability at the time, where it relied too much on the computers system time to generate random passwords meaning the passwords werent so random after all.</p>
<p>After reverse engineering the algorithm and plugging in every potential possibility over a seven-week period (thats millions upon millions of guesses), Grand and his team finally cracked the wallet, ending with one very thrilled Bitcoin hodler.&nbsp;</p>
<figure class="wp-block-image aligncenter size-full is-resized">
 <img decoding="async" width="600" height="302" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Roboform.jpg" alt="RoboForm" class="wp-image-33875" style="width: 100%;height:auto" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Roboform.jpg 600w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Roboform-300x151.jpg 300w" sizes="(max-width: 600px) 100vw, 600px">
 <figcaption class="wp-element-caption">
  <em>What the RoboForm password generator looks like today. (RoboForm)</em>
 </figcaption>
</figure>
<p>It was a good one. It definitely was, Grand tells Magazine. However, not every case has a happy ending. Some of the recovered wallets have turned out to be almost empty.</p>
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 <p>Its not a business for the faint of heart. I would say its not really a business for someone who honestly is looking to make a lot of money.&nbsp;</p>
</blockquote>
<p>You know, cryptocurrency people, I think, are getting into recovery, thinking theyre going to strike it rich, and its a lot of work, says Grand.</p>
<section class="adv-banner adbutler-ad adbutler-ad__desktop">
 <div class="container">
  <a href="https://servedbyadbutler.com/go2/;ID=169476;size=728x90;setID=601214;referrer=https%3A%2F%2Fcointelegraph.com%2Fmagazine%2Fwp-json%2Fwp%2Fv2%2Fposts%3F_embed%26per_page%3D100" target="_blank"><img decoding="async" src="https://servedbyadbutler.com/adserve/;ID=169476;size=728x90;setID=601214;referrer=https%3A%2F%2Fcointelegraph.com%2Fmagazine%2Fwp-json%2Fwp%2Fv2%2Fposts%3F_embed%26per_page%3D100;type=img" alt="Meet the hackers who can help get your crypto life savings back"></a>
 </div>
</section>
<section class="adv-banner adbutler-ad adbutler-ad__mobile">
 <div class="container">
  <a href="https://servedbyadbutler.com/go2/;ID=169476;size=300x250;setID=601213;referrer=https%3A%2F%2Fcointelegraph.com%2Fmagazine%2Fwp-json%2Fwp%2Fv2%2Fposts%3F_embed%26per_page%3D100" target="_blank"><img decoding="async" src="https://servedbyadbutler.com/adserve/;ID=169476;size=300x250;setID=601213;referrer=https%3A%2F%2Fcointelegraph.com%2Fmagazine%2Fwp-json%2Fwp%2Fv2%2Fposts%3F_embed%26per_page%3D100;type=img" alt="Meet the hackers who can help get your crypto life savings back"></a>
 </div>
</section>
<p>If you work on a project that happens to have a lot of money, thats great […], but for every huge wallet, you have a lot of smaller wallets […] you have to start weighing that time versus effort, he adds.&nbsp;</p>
<p>Grand is a famed hardware hacker whos testified in Congress about cybersecurity. Hes also a YouTube personality, a former host of Discovery Channels <em>Prototype This</em>, and a public speaker.</p>
<p>So, for Grand, crypto recovery is more of a side quest than a full-time commitment.</p>
<h2 class="wp-block-heading" id="h-brooks-and-son-crypto-recovery-team"><strong>Brooks and son crypto recovery team</strong></h2>
<p>Thats not the case for Chris and Charles Brooks, a father-and-son crypto recovery team based in New Hampshire who have operated Crypto Asset Recovery since late 2020.&nbsp;</p>
<p>The duo claim to have recovered as much as $6 million worth of Bitcoin since they began their venture.</p>
<p>Were not billionaires or millionaires or anything like that, but its a nice little business, Chris tells Magazine.&nbsp;</p>
<p>Some of their recent crypto spelunking has involved guessing the remaining six characters of a private key that had been partially ripped when removing the holographic sticker from their Casascius coin a physical Bitcoin made of metal that was available for a brief window between 2011 and 2013. It held around half a Bitcoin, worth around $33,000 today.&nbsp;</p>
<p>Another recent case involved a lady from Croatia who had written down a 24-word seed phrase for a hardware wallet and then lost the paper on which it was written. She somehow used pencil shading to get an imprint for most of the seemingly lost words, and the Brooks duo was able to test every possible combination for the remaining words.&nbsp;</p>
<figure class="wp-block-image aligncenter size-full is-resized">
 <img decoding="async" width="600" height="277" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Casascius-coin-auction.jpg" alt="Physical bitcoin recovery" class="wp-image-33878" style="width: 100%" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Casascius-coin-auction.jpg 600w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Casascius-coin-auction-300x139.jpg 300w" sizes="(max-width: 600px) 100vw, 600px">
 <figcaption class="wp-element-caption">
  <em>There are still 18,499 Casascius Coins and Bars still unopened today. (Stacks Bowers Galleries Auction)</em>
 </figcaption>
</figure>
<p>We dont really do brute force just because the space is too vast, but when youre only missing a few characters of a private key, its […] something that with some compute power you can do pretty quickly, said Chris.&nbsp;</p>
<p>But crypto recovery has its limits, too. Brooks and Grand say they have had to turn down a great deal of the jobs theyre offered.</p>
<h2 class="wp-block-heading" id="h-scammers-scammers-everywhere"><strong>Scammers, scammers everywhere</strong></h2>
<p>We get dozens and dozens of emails a day, says Grand. I would say we turn down most of them, and the primary issue is people who have been scammed.&nbsp;</p>
<p>Its just super unlikely to ever get funds back, and we dont want to misdirect them and give them a glimmer of hope.</p>
<p><a href="https://cointelegraph.com/news/crypto-investment-fraud-fbi-united-states-scams" target="_blank" rel="nofollow">Crypto fraud losses</a> in America rose to $3.9 billion in 2023, rising more than 50% year-on-year, according to a report from the FBIs Internet Crime Center. The figure made up the lions share of all investment fraud perpetrated last year.&nbsp;</p>
<figure class="wp-block-image aligncenter size-large is-resized">
 <img decoding="async" width="1024" height="647" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/crypto-fraud-losses-1024x647.jpg" alt="Crypto scams" class="wp-image-33879" style="width: 100%" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/crypto-fraud-losses-1024x647.jpg 1024w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/crypto-fraud-losses-300x190.jpg 300w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/crypto-fraud-losses-770x487.jpg 770w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/crypto-fraud-losses.jpg 1470w" sizes="(max-width: 1024px) 100vw, 1024px">
 <figcaption class="wp-element-caption">
  <em>Investment fraud losses in the United States in 2023. (Federal Bureau of Investigation)</em>
 </figcaption>
</figure>
<p>Since 2021 to 2023, we saw maybe 60% of our inbound leads were folks who had been scammed, and our policy at that point was that we cant do anything for you, adds Charles.</p>
<p>Adding insult to injury, many of these clients would then go to another crypto recovery company though they are often just scammers in disguise.&nbsp;</p>
<p>We started to see folks we turned away getting scammed themselves. So in May last year, we started very slowly offering scam tracing services to customers, said Charles.&nbsp;</p>
<p>That service doesnt involve them recovering the funds or hacking the scammers, though.</p>
<p>Our job is to trace the funds from the scammers wallet to a real-world entity, which more often than not means an exchange.</p>
<figure class="wp-block-image aligncenter size-large is-resized">
 <img decoding="async" width="1024" height="565" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/FBI-scam-1024x565.png" alt="Crypto investment scams" class="wp-image-33881" style="width: 100%;height:auto" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/FBI-scam-1024x565.png 1024w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/FBI-scam-300x165.png 300w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/FBI-scam-770x425.png 770w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/FBI-scam.png 1028w" sizes="(max-width: 1024px) 100vw, 1024px">
 <figcaption class="wp-element-caption">
  <em>PSA about scammers who claim to help recover funds from scammers. (Federal Bureau of Investigation)</em>
 </figcaption>
</figure>
<p>Last August, the FBI <a href="https://www.ic3.gov/Media/Y2023/PSA230811#fn1" target="_blank" rel="nofollow">issued</a> a public warning about companies falsely claiming to be able to recover funds lost in cryptocurrency investment scams.&nbsp;</p>
<p>These fraudsters will typically charge an up-front fee and then proceed to ghost the victim or produce a shoddy tracing report asking for additional fees to recover funds.&nbsp;</p>
<p>Fraudsters may claim affiliation with law enforcement or legal services to appear legitimate, said the FBI:</p>
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 <p>Private sector recovery companies cannot issue seizure orders to recover cryptocurrency. Cryptocurrency exchanges only freeze accounts based on internal processes or in response to legal process.</p>
</blockquote>
<h2 class="wp-block-heading" id="h-isn-t-impersonation-grand"><strong>Isnt impersonation Grand?</strong></h2>
<p>Meanwhile, Grand has been fighting a personal battle against impersonators some who appear to have employed deepfake audio calls to try to swindle others.&nbsp;</p>
<p>Ive had people that have been scammed by impersonators of me that say theyve talked to me through voice messaging. So, its probable theyre already doing that because my voice is somewhat unique in that way.</p>
<div class="article-suggest"> 
 <div class="article-suggest__title display3">
  Read also
 </div> 
 <div class="article-suggest__items"> 
  <div class="article-suggest__item"> <a href="https://cointelegraph.com/magazine/crypto-regulation-sec-chair-gary-gensler-final-say/" class="article-suggest__subtitle display4"> <span>Features</span> <p>Crypto regulation: Does SEC Chair Gary Gensler have the final say?</p> </a> 
  </div> 
  <div class="article-suggest__item"> <a href="https://cointelegraph.com/magazine/agents-of-influence-blockchain-cryptoverse/" class="article-suggest__subtitle display4"> <span>Features</span> <p>Agents of Influence: He Who Controls The Blockchain, Controls The Cryptoverse</p> </a> 
  </div>
 </div>
</div>
<p>When you search Google for the term Joe Grand crypto recovery, you will find at least one very suspicious looking website that is most definitely not legit, so we wont show it here.</p>
<p>Ive actually had to set up a social media presence on every social media platform […] which at least helps bring people to the right Joe Grand.&nbsp;</p>
<h2 class="wp-block-heading" id="h-do-you-really-own-the-wallet"><strong>Do you really own the wallet?</strong></h2>
<p>Sometimes, people try to use crypto recovery services to get into wallets that they dont own.&nbsp;</p>
<p>We get cases where people tell us that they are Satoshi Nakamoto and that they have access to the wallet, says Charles.&nbsp;</p>
<p>They always seem to have access to one wallet with a million [in] Bitcoin.&nbsp;</p>
<figure class="wp-block-image aligncenter size-large is-resized">
 <img decoding="async" width="1024" height="698" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Enigma-Cracker-1024x698.png" alt="Brute force crypto wallets" class="wp-image-33880" style="width: 100%" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Enigma-Cracker-1024x698.png 1024w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Enigma-Cracker-300x205.png 300w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Enigma-Cracker-770x525.png 770w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Enigma-Cracker.png 1100w" sizes="(max-width: 1024px) 100vw, 1024px">
 <figcaption class="wp-element-caption">
  <em>Theres a tool on GitHub that claims to be able to brute force crypto wallets. We have no idea if its legit, though. (GitHub)</em>
 </figcaption>
</figure>
<p>There was a case where a divorcing wife tried to enlist their help to get into her ex-husbands Bitcoin stash, too.</p>
<p>Weve had folks who say that they were involved in the creation of Bitcoin, and it was created by the US military in 2006 or 2007. We cover the spectrum in terms of crazy stories.</p>
<h2 class="wp-block-heading" id="h-it-s-not-always-about-the-money"><strong>Its not always about the money</strong></h2>
<p>Charles and Chris Brooks stress that while the business can be lucrative, theres more to it than that.&nbsp;</p>
<p>When you put someone back in control of $500 or $5,000 […] this makes a difference to people, making the business fun.</p>
<p>According to Brooks, around 50%60% of Crypto Asset Recoverys inbound tickets come from less economically developed countries that use Bitcoin as their means of savings.</p>
<p>Argentina and Venezuela, two of the highest-inflation countries in the world, also have a high crypto adoption rate.</p>
<figure class="wp-block-image aligncenter size-full">
 <img decoding="async" width="800" height="223" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Lamar-2.jpg" alt="Joe Grand crypto recovery" class="wp-image-33882" srcset="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Lamar-2.jpg 800w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Lamar-2-300x84.jpg 300w, https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2024/06/Lamar-2-770x215.jpg 770w" sizes="(max-width: 800px) 100vw, 800px">
 <figcaption class="wp-element-caption">
  <em>Grand tried to help a Seattle Bus driver recover millions in BTC in 2023, but it turned out to be a bust. (YouTube)</em>
 </figcaption>
</figure>
<p>One of the prerogatives of ours for converting to scale model where we can help people at any price point because to us a $200 or $300 wallet may not affect the bottom line […] those are the most impactful cases often times because thats where you see peoples life savings, said Brooks.&nbsp;</p>
<p>Grand says its the same for him, too.</p>
<p>Just because were not going to make money on a deal doesnt mean were not going to do it, he adds.</p>
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
 <p>Money, the value of money is different to different people […] and yeah, thats part of it, too, is being able to change peoples lives.</p>
</blockquote>
<p>I wasnt even thinking of that when we started helping to really see peoples eyes light up when were successful for them […] Those are pretty special moments that are hard to describe, says Grand.</p>
<div class="subscribe subscribe--inner">
 <div class="container">
  <div class="subscribe__inner">
   <div class="subscribe__content"> 
    <div class="subscribe__title display2">
     Subscribe
    </div> 
    <div class="subscribe__desc text-l">
     The most engaging reads in blockchain. Delivered once a week.
    </div> 
    <div class="wpcf7 no-js" id="wpcf7-f13672-o1" lang="en-US" dir="ltr">
     <div class="screen-reader-response">
      <p role="status" aria-live="polite" aria-atomic="true"></p> 
      <ul></ul>
     </div>
     <form action="/magazine/wp-json/wp/v2/posts?_embed&amp;per_page=100#wpcf7-f13672-o1" method="post" class="wpcf7-form init subscribe__form demo" aria-label="Contact form" novalidate data-status="init">
      <div style="display: none;">
       <input type="hidden" name="_wpcf7" value="13672">
       <input type="hidden" name="_wpcf7_version" value="5.7.7">
       <input type="hidden" name="_wpcf7_locale" value="en_US">
       <input type="hidden" name="_wpcf7_unit_tag" value="wpcf7-f13672-o1">
       <input type="hidden" name="_wpcf7_container_post" value="0">
       <input type="hidden" name="_wpcf7_posted_data_hash" value="">
      </div>
      <fieldset class="form-group">
       <p><input size="40" class="wpcf7-form-control wpcf7-text wpcf7-email wpcf7-validates-as-required wpcf7-validates-as-email" id="footer-subscribe" aria-required="true" aria-invalid="false" value="" type="email" name="your-email"><label for="footer-subscribe">Email address</label></p>
      </fieldset>
      <p><button class="subscribe__btn btn btn-white">SUBSCRIBE</button></p>
      <div class="wpcf7-response-output" aria-hidden="true"></div>
     </form>
    </div>
   </div>
   <div class="subscribe__img"> 
    <img decoding="async" src="https://s3.magazine.cointelegraph.com/magazine/wp-content/uploads/2022/10/reading-copy.png" alt="Subscribe to Magazine by Cointelegraph Newsletter.">
   </div>
  </div>
 </div>
</div>

Meet the hackers who can help get your crypto life savings back

Table of Contents

Cointelegraph

Other articles published on Jul 10, 2024

New Crypto Airdrops with Big Potential

Bitcoin Boosts Altcoins Recovery

Financial Institutions Integrate with Cryptocurrencies

Shiba Inu Skyrockets 347% in Burn Rate, With Millions of SHIB Burned

Agoric Unveils Orchestration for Next-Gen Web3 Applications

Oil King Pepe Memecoin Buyer Makes Huge 6,500% Profit and Waits For Another 20,000% Rally

Join our free newsletter for daily crypto updates!