BTC puzzle 66 was solved recently, then stolen by bots

[pancakett]

additional information I would like to add is that in the block explorer: https://www.blockchain.com/explorer/addresses/btc/13zb1hQbWVsc2S7ZTZnP2G4undNNpdh5so

It seems that 90% of the BTC was sent to one wallet and 10% sent to another.

In my opinion this 10% was a service fee, either for using the snipe software, It seems to me that whoever sniped this was using a commercialized sniper bot.

You may be right, I think so too.

 

[Onlyup]

Is this the reason Binance removed XMR from its listings - because it's a KYC exchange and having a way for people to erase financial transaction tracing is not in line with KYC?

The delisting happened because Binance requires that deposits come from a publicly transparent address. Monero uses stealth addresses for all addresses.

 

[pancakett]

You're right sorry lol I didn't knew that you have to guess part of the private key, I've just read about the puzzles.

The real question now is how did they know when scanning for the pub key that was the right one? Bruteforcing each transaction pub key with the target private one?

Also check the signed transaction message left by the prize stealer ahahah

TX input:
Code:
1FuckUmT5yBAvozf6gT8GRQVbJ7iBDUnrH

TX outputs:
Code:
1Jvv4yWkE9MhbuwGU66666666669sugEF 0.00000001
1YouAreSoDumbLoL666666666667K5aR4 0.00000002
1WhatWereUThinking6666666662wkqq1 0.00000003
1YouDeserveNothing6666666665sbbBC 0.00000004
1YouEpicFaiLure66666666666688GSDA 0.00000005
1BitchAssLoser66666666666669dBUVg 0.00000006
1AndEveryoneELse666666666669Vnc8C 0.00000007
1ThisisALosingGame6666666667HAZdf 0.00000008
1JustGetAReaLJob666666666665vGKVD 0.00000009
1YoureWastingTimeAndMoney664CVExC 0.00000010
1AndCausingCLimateChange6666HK8Qc 0.00000011
13zb1hQbWVsc2S7ZTZnP2G4undNNpdh5so 0.00000012
1Jvv4yWkE9MhbuwGUoqFYzDjRVQHaLWuJd 0.00000013
1FK5PjPNARQmg94n2cNHTo9417kWfXUDBQ 0.00002125

LOL nice share man, I didn't even bother looking into it further but this is some epic trolling lmao tbh I was so disappointed in the solver as well, they should have researched extensively before initiating a transaction after getting their hands on the private key.

and to answer your question, user /Misty has explained it pretty well in one of their posts in this thread - check it out.

Basically I am pretty sure there were a lot of bots hunting for the 66 pubkey by following the address and waiting for a transaction to initiate, only to scrape the public key, use it in something like kangaroo to crack the private key within a minute [all while the initial transaction hasn't gone through] and front run it with higher tx fee for instance, grabbing the prize for themselves.

I would say it was a dumb move by the solver and if it all went down like this, I feel bad for whoever wasted all that time and resources that went into solving it.

 

[Jasperrre]

Took years to solve, due an attempted transaction the public key was exposed - which was then used by the bots to hunt the private key within minutes and steal the reward.

This was nothing out of the blue though, it was well anticipated that the reward would be stolen as soon as the public key was exposed - which is why the only gamble to take would have been to get a private miner to mine the block, not exposing the pubkey before the transaction went through.. unless the miner decided to do the same lol

How did you know it was stolen from a different winner by a bot??

I am amused that you are just assuming the transaction was hijacked just because u feel so. Is there any pending transaction u can see on p66 address?? How then did u conclude that the winner lost the price?? U really think someone who beat 8 billion others to solve a puzzle is so dumb??? Lol

 

[learningbitcoin]

LOL nice share man, I didn't even bother looking into it further but this is some epic trolling lmao tbh I was so disappointed in the solver as well, they should have researched extensively before initiating a transaction after getting their hands on the private key.

and to answer your question, user /Misty has explained it pretty well in one of their posts in this thread - check it out.

Basically I am pretty sure there were a lot of bots hunting for the 66 pubkey by following the address and waiting for a transaction to initiate, only to scrape the public key, use it in something like kangaroo to crack the private key within a minute [all while the initial transaction hasn't gone through] and front run it with higher tx fee for instance, grabbing the prize for themselves.

I would say it was a dumb move by the solver and if it all went down like this, I feel bad for whoever wasted all that time and resources that went into solving it.

Small doubt

How they scarped pub key from the transaction , also pubkey of whom (sender or receiver)

Can we also scrap pubkey from every other transaction ,

Also , we can use kangroo like tools to get back private key ,

teach me i am wrong

also , one more point to be added

If pub key of sender( puzzle creator ), i think it is publicly available right ?

then money bots able to finish this transaction away before right ?

 

[Jasperrre]

Small doubt

How they scarped pub key from the transaction , also pubkey of whom (sender or receiver)

Can we also scrap pubkey from every other transaction ,

Also , we can use kangroo like tools to get back private key ,

teach me i am wrong

Because the pubkey of the sender will be part of the input script authorizing the spending from that wallet. The pubkey exposed is that of sender of course not receivers. Yes any tx will expose the sender's pubK.
Yes u can hack for key with vulnerable Entropy like that of P66. The entropy in P66 is 66 bits as opposed to 256 bits that is used for real user wallets today. So it is only relevant for this puzzle or any other wallet that you know which has a weak entropy. BSG could reveal keys in as little as 30 seconds of such entropies in my experience.

also , one more point to be added

If pub key of sender( puzzle creator ), i think it is publicly available right ?

then money bots able to finish this transaction away before right ?

Yes there are bots listening for the pub of these puzzle addresses 66,67,68 up till 99 even IG.and once they see the pubK, they will drain them automatically. I just didn't think that this puzzle 66 was forerun by a bot because the actions were very intentional as well. Splitting the btc into 2 and so on. But I just came across some proof that might mean it was hijacked, the original transaction to a different address which was replaced on the Blockchain by the thief's transaction.

 

[learningbitcoin]

Because the pubkey of the sender will be part of the input script authorizing the spending from that wallet. The pubkey exposed is that of sender of course not receivers. Yes any tx will expose the sender's pubK.
Yes u can hack for key with vulnerable Entropy like that of P66. The entropy in P66 is 66 bits as opposed to 256 bits that is used for real user wallets today. So it is only relevant for this puzzle or any other wallet that you know which has a weak entropy. BSG could reveal keys in as little as 30 seconds of such entropies in my experience.

does every transacation type like ( p2pk , p2pkh ) exposes pub - key of sender

also puzzle solver has to find private key or pub - key
which required to be find


also based on my knowledge thereare many transaction types which doesn't direclty expose pub - key of sender in mempool
Why solver is not ready to use other safe types ?

Yes there are bots listening for the pub of these puzzle addresses 66,67,68 up till 99 even IG.and once they see the pubK, they will drain them automatically. I just didn't think that this puzzle 66 was forerun by a bot because the actions were very intentional as well. Splitting the btc into 2 and so on. But I just came across some proof that might mean it was hijacked, the original transaction to a different address which was replaced on the Blockchain by the thief's transaction.

can you explain in more detail , for my question : Everyone know Pub key of all transactions right ( I may be wrong in this or Evryone know just bitcoin address of sender)
Why bots just spoffed now itself

 

[Jasperrre]

does every transacation type like ( p2pk , p2pkh ) exposes pub - key of sender

also puzzle solver has to find private key or pub - key
which required to be find


also based on my knowledge thereare many transaction types which doesn't direclty expose pub - key of sender in mempool
Why solver is not ready to use other safe types ?

I am amused that you are just assuming the transaction was hijacked just because u feel so. Is there any pending transaction u can see on p66 address?? How then did u conclude that the winner lost the price?? U really think someone who beat 8 billion others to solve a puzzle is so dumb??? Lol

I have been able to get proof that it was most certainly stolen. I just don't know why the invalidated transaction by the original winner isn't logged to the address 13zb1... But is legitimately registered on the Blockchain still. Sad, I hope people will donate to him or the creator withdraws from like 165 which might not be done at all to give him. There is also a chance that he did RBF himself, I mean the winner.

does every transacation type like ( p2pk , p2pkh ) exposes pub - key of sender

also puzzle solver has to find private key or pub - key
which required to be find


also based on my knowledge thereare many transaction types which doesn't direclty expose pub - key of sender in mempool
Why solver is not ready to use other safe types ?

I will be consice not to confuse u because it isn't so complex and I am a great explainer.

Yes all spending txs expose the senders pubK once they hit the mempool whether public or local mempools.

Obviously to solve the puzzle which is to gain access to move the funds, u need the private key and that is what we are solving for. All that was available for 66 was the public address or simply address not to confuse u. we never had the pub key because we don't know the private key and the address also has no spending transaction.

Privatekey pased through the elliptic curve is your public key and your public key Sha-256 and ripemd 160 is the address u share to collect btc.

From Math it is like
Private key-> k
Public key -> pubK

secp256k1(k) = pubK
RipeMD(SHA-256(pubK)) = Btc address

If ur public key is known. That makes ur wallet vulnerable, how vulnerable will be based on your private key's entropy. So far 256 bit entropies which is like throwing heads or tails 256 times and combining the results has been unguessable right. But if u reduce it to 66 guesses of heads or tails that makes it extremely vulnerable. Still very unguessable by humans but super computers are strong enough today with some algorithms to crack it. That is the case of 66.

To your last question, there is no spending tx that doesn't expose the pubKey of the sender. But you can reduce exposure by not creating a direct transaction to the mempool.

The winner made no effort to safeguard the tx which is very f*olish.

U can submit a rawTX directly to a mining pool which wouldn't expose ur tx on the mempool before at least one confirmation. But remember, the mining pool and it's miners can still see your pubkey here so they could also steal it but it removes the exposure to the global mempool and bots on it. If u get a noble pool with integrity. They will carry it out without exposing your tx or forerunning you. So fara Mara Slipstream is the recommendation I heard.

This is all the valuable info worth years of experience.

can you explain in more detail , for my question : Everyone know Pub key of all transactions right ( I may be wrong in this or Evryone know just bitcoin address of sender)
Why bots just spoffed now itself

Wrong, everyone knows the address of their wallet and can share it. The publicKey is different and my indepth analysis into the basic technical cryptographic details above should help you really.

I had a very great Cryptographer for my Doctorate and he was so understandable. Bless him, this was how he broke it down.

 

[learningbitcoin]

I have been able to get proof that it was most certainly stolen. I just don't know why the invalidated transaction by the original winner isn't logged to the address 13zb1... But is legitimately registered on the Blockchain still. Sad, I hope people will donate to him or the creator withdraws from like 165 which might not be done at all to give him. There is also a chance that he did RBF himself, I mean the winner.


I will be consice not to confuse u because it isn't so complex and I am a great explainer.

Yes all spending txs expose the senders pubK once they hit the mempool whether public or local mempools.

Obviously to solve the puzzle which is to gain access to move the funds, u need the private key and that is what we are solving for. All that was available for 66 was the public address or simply address not to confuse u. we never had the pub key because we don't know the private key and the address also has no spending transaction.

Privatekey pased through the elliptic curve is your public key and your public key Sha-256 and ripemd 160 is the address u share to collect btc.

From Math it is like
Private key-> k
Public key -> pubK

secp256k1(k) = pubK
RipeMD(SHA-256(pubK)) = Btc address

If ur public key is known. That makes ur wallet vulnerable, how vulnerable will be based on your private key's entropy. So far 256 bit entropies which is like throwing heads or tails 256 times and combining the results has been unguessable right. But if u reduce it to 66 guesses of heads or tails that makes it extremely vulnerable. Still very unguessable by humans but super computers are strong enough today with some algorithms to crack it. That is the case of 66.

To your last question, there is no spending tx that doesn't expose the pubKey of the sender. But you can reduce exposure by not creating a direct transaction to the mempool.

The winner made no effort to safeguard the tx which is very f*olish.

U can submit a rawTX directly to a mining pool which wouldn't expose ur tx on the mempool before at least one confirmation. But remember, the mining pool and it's miners can still see your pubkey here so they could also steal it but it removes the exposure to the global mempool and bots on it. If u get a noble pool with integrity. They will carry it out without exposing your tx or forerunning you. So fara Mara Slipstream is the recommendation I heard.

This is all the valuable info worth years of experience.


Wrong, everyone knows the address of their wallet and can share it. The publicKey is different and my indepth analysis into the basic technical cryptographic details above should help you really.

I had a very great Cryptographer for my Doctorate and he was so understandable. Bless him, this was how he broke it down.

Great explanation , Take a bow

But after finding the private key of sender
Why puzzle solver is used P2PK transaction type ( Which directly exposes pubK of sender , i mean in this transaction type) , he know P2PK is older transaction type

He can use other type of advanced transaction types right ( like P2PKH or others) which only expose hash(pubK) of sender

 

[Jasperrre]

Great explanation , Take a bow

But after finding the private key of sender
Why puzzle solver is used P2PK transaction type ( Which directly exposes pubK of sender , i mean in this transaction type) , he know P2PK is older transaction type

He can use other type of advanced transaction types right ( like P2PKH or others) which only expose hash(pubK) of sender

Great, U have misunderstood these terms largely.

First off P2PKH, P2SH, and SegWit (Bech32) addresses all expose the sender's public key when the transaction is spent. Sender will always be exposed keep in mind.

P2PK Pay to PubK is a tx from a sender to the receiver's Public Key.

P2PKH Pay to Pubkey Hashed is a tx from a sender to the RECEIVER's Hashed or short address.

We all dont do p2pk today given everyone shares their address and not pub key.

A Sender's address will always be exposed no mater tx type. A receiver's address will be exposed with the first p2pk which was a mistake by Satoshi because he didn't know about the shorter form of representing publickeys as addresses which is the Hash here. It is called Hash160 of the output from sha256 and ripemd160.

So the puzzle winner of P66 who was duped did initiate a hashed tx not just a p2pk and as the sender, the pKey of P66 was exposed regardless. His receiver address is not the thief's concern whether it is hashed or not.

Hope this clears ur misunderstanding up.

 

[learningbitcoin]

Great, U have misunderstood these terms largely.

First off P2PKH, P2SH, and SegWit (Bech32) addresses all expose the sender's public key when the transaction is spent. Sender will always be exposed keep in mind.

P2PK Pay to PubK is a tx from a sender to the receiver's Public Key.

P2PKH Pay to Pubkey Hashed is a tx from a sender to the RECEIVER's Hashed or short address.

We all dont do p2pk today given everyone shares their address and not pub key.

A Sender's address will always be exposed no mater tx type. A receiver's address will be exposed with the first p2pk which was a mistake by Satoshi because he didn't know about the shorter form of representing publickeys as addresses which is the Hash here. It is called Hash160 of the output from sha256 and ripemd160.

So the puzzle winner of P66 who was duped did initiate a hashed tx not just a p2pk and as the sender, the pKey of P66 was exposed regardless. His receiver address is not the thief's concern whether it is hashed or not.

Hope this clears ur misunderstanding up.

Great man, thanks for the detailed explanations.

I stumbled upon information from the internet, but there is no clarity in anything. Now I can sleep peacefully.

But one more question: Can the transaction type be decided by the sender, or is it automatic?

 

[Jasperrre]

Yes, u can choose a tx type however this is fully constrained by the type of address of the sender. Depending on the Addr type u might have little to no extra option or more options.

 

[learningbitcoin]

Recently , My youtube is flooding with these type of videos
Is this much easy to crack an private key
am i getting it wrong

 

[Tempwinner019]

LOL nice share man, I didn't even bother looking into it further but this is some epic trolling lmao tbh I was so disappointed in the solver as well, they should have researched extensively before initiating a transaction after getting their hands on the private key.

and to answer your question, user /Misty has explained it pretty well in one of their posts in this thread - check it out.

Basically I am pretty sure there were a lot of bots hunting for the 66 pubkey by following the address and waiting for a transaction to initiate, only to scrape the public key, use it in something like kangaroo to crack the private key within a minute [all while the initial transaction hasn't gone through] and front run it with higher tx fee for instance, grabbing the prize for themselves.

I would say it was a dumb move by the solver and if it all went down like this, I feel bad for whoever wasted all that time and resources that went into solving it.

Why was this over and I think it's b******* that I got my f****** s*** taken away just because it's some stupid aisn't this supposed to be for people who have a chance to solve it? Will I solve it not no f****** bop? Not nothing. So, if you have any means of getting my money to me, I'll gladly split it in half, but I think this is b******* I'm near to the crypto world and I've heard about the Bitcoin puzzles and I'm kind of shocked that I solved the 661 but I had no idea that it was gonna be like that.

 

[Tempwinner019]

Why was this over and I think it's b******* that I got my f****** s*** taken away just because it's some stupid aisn't this supposed to be for people who have a chance to solve it? Will I solve it not no f****** bop? Not nothing. So, if you have any means of getting my money to me, I'll gladly split it in half, but I think this is b******* I'm near to the crypto world and I've heard about the Bitcoin puzzles and I'm kind of shocked that I solved the 661 but I had no idea that it was gonna be like that.

I just can't believe this b******* and I can even show you proof that I don't know how to go about these cryptograms. S*** I didn't know that there was gonna be people who is gonna stin my money for finding. I really want my money. I don't want it all. I just want some. That would have done me so good. I am hooting in this day and age. I do have a job, but my job doesn't pay enough to live in this economy, so please help me understand how to do all those cryptoshike.'cause apparently it's not as easy as people say

 

[Tempwinner019]

I just can't believe this b******* and I can even show you proof that I don't know how to go about these cryptograms. S*** I didn't know that there was gonna be people who is gonna stin my money for finding. I really want my money. I don't want it all. I just want some. That would have done me so good. I am hooting in this day and age. I do have a job, but my job doesn't pay enough to live in this economy, so please help me understand how to do all those cryptoshike.'cause apparently it's not as easy as people say

 

[doubledhamal]

How much they made ?

 

[learningbitcoin]

Yes, u can choose a tx type however this is fully constrained by the type of address of the sender. Depending on the Addr type u might have little to no extra option or more options.

is this pretty to easy to crack this :
Recently , My youtube is flooding with these type of videos
Is this much easy to crack an private key
am i getting it wrong

check this post for youtube video links https://www.blackhatworld.com/seo/b...tly-then-stolen-by-bots.1636714/post-18333453

 

[learningbitcoin]

Yes, u can choose a tx type however this is fully constrained by the type of address of the sender. Depending on the Addr type u might have little to no extra option or more options.

Also , Why receiver ( puzzle solver ) able to access 6.6 btc account and theh he created a transaction from cracked account to his account

Why he did choose a transaction type of older ( p2pk ) rather than some advanced p2pkh ?

 

[Tempwinner019]

The mistake that was made was that the person who found the key did a normal transaction through the mempool, a bot was waiting looking for a transaction coming from the wallet: 13zb1hQbWVsc2S7ZTZnP2G4undNNpdh5so which is puzzle 66 wallet. Remember that Puzzle 66 is only using 66-bit encryption vs standard sha-256 so its much much easier to crack vs a standard wallet.

When you do a transaction via the mempool it doesn´t happen until its been confirmed which usually takes 10 - 20mins give or take, so first the the transaction was broadcasted and within the signature of this transaction is the Public Key which is different from Public address. We know the public address: 13zb1hQbWVsc2S7ZTZnP2G4undNNpdh5so, but not the public key, this is only revealed in Tx.

The Public key is another piece of data which can be used to significantly narrow down the search for Puzzle 66, using this data and Kangaroo it seems that the bot cracked puzzle66 in around 30s, and front ran the original transaction.

I think the only way to securely take the rewards from future puzzles are:

• Using a private pool to verify the transaction where you have a contract/deal with the operators.
• mara slipstream: slipstream.mara.com
• Timing the Tx perfectly less than 10/20second before the next block is mined
• Setting a high initial TX fee which will outperform the bot (although the bot could be programmed to counter this and thus all the reward goes to the miners)
• eventually when we are on puzzle 100+ I don´t know if kangroo with public address and public key will be able to find it faster than the average block time
• having your own bot

Looking at the wallet history it really does look like the reward was snatched from some poor person who won the lottery (albeit only 25% into the range on 17quintillion keys).

Hello I was the poor person that didn't know how all this worked I would have been ok with 10000 dollars like shit I am helping my mom fight cancer and so dumb rich asshole took what could have helped so much in my life but I never have had this so called lord help me in anyway I probably would've f****** ended up transferring it to my wallet.Buying a new car in your house and then totally end up f****** locking myself out of it.So thanks guys appreciate that's personal that I love how this world is so nice to people I found it.I deserve something