←back to thread

191 points aorloff | 6 comments | | HN request time: 0s | source | bottom
Show context
mattlondon ◴[] No.44467062[source]
Maybe that guy who was digging up a landfill to find his old HDD finally found it!

Seriously though, what are the odds that someone has been quietly spending 10s/100s of millions in cloud compute to brute force the keys for old wallets?

replies(12): >>44467081 #>>44467123 #>>44467396 #>>44467750 #>>44469927 #>>44470471 #>>44470497 #>>44470630 #>>44470975 #>>44471691 #>>44471790 #>>44472481 #
bravoetch ◴[] No.44467081[source]
I would say the odds are zero because that's the likelihood of being able to brute-force anything in the key space.
replies(2): >>44467180 #>>44477232 #
handfuloflight ◴[] No.44467180[source]
It's not zero. https://lbc.cryptoguru.org/trophies
replies(1): >>44467374 #
onlyrealcuzzo ◴[] No.44467374[source]
It's close enough.

There are 200 million+ BTC wallets.

They've found 54 out of 200 million+ or about 0.00002% of wallets - in how many years?

replies(2): >>44467393 #>>44469911 #
kristopolous ◴[] No.44469911[source]
People are actively doing it. Mostly using clore.ai on their 4090x bundles.

I used to work in the gpu rental space up to about a month ago.

I talked to multiple people dropping hundreds of thousands of dollars on looking for those keys.

I'd put house odds at say 20:1 that someone cracked it over someone holding for 14 years and deciding now is strike time.

Also if it's a true crack, then Bitcoin price could collapse swiftly if someone just snatched a wallet for 200k of compute or whatever.

That's always been the real existential risk. I talked about it as the DES problem over a decade ago. Let's see if this is it

replies(3): >>44470110 #>>44470282 #>>44471471 #
adastra22 ◴[] No.44470110[source]
Those people were wasting their money. They could be running those GPUs from now until the end of the universe and still have approximately 0% chance of finding a single used key.
replies(1): >>44470143 #
kristopolous ◴[] No.44470143[source]
Right. Those were the ones I talked to, just by random chance. It means that there are a lot of them.

This implicates a few things - (1) people win the lottery every day and (2) it's highly unlikely that the best techniques are publicly known.

Perhaps there's something that requires $1,000,000 in investment to yield a 1:100 chance of finding a particular targeted wallet using some clever shortcuts.

The other explanation is very implausible: a human sits on wallets without splitting up the funds or derisking exposure, has wallets with a billion dollars sitting it in.

Now I only have a few million, but even I have something like 6 brokerages and 12 banks. Even when I was a btc holder, I didn't keep over $100k in a single wallet.

The snatching theory requires no new revolutionary math, no substantial breakthroughs, just some clever people with a lot of resources and a goal.

Either explanation is speculative. I think the "lucky researchers at some University" theory is more likely then the "let's wait 14 years until this $1,000 becomes $1,000,000,000."

Especially because (1) we're not exactly at some high water mark and (2) if this was just a person with a wallet trying to do something like pay for life's uncertainties, you can do basically 100% of that with like 4btc.

However if you successfully snatched the wallet, you're on a clock before someone else gets it. This is exactly the kind of movement you'd be doing

Also if some old bitcoiner comes out and says "hey that was me", we're still up in the air. If I had snatched a billion dollar wallet, the first thing I'd do is payoff an old btc'er to claim its there's to prevent market panic.

replies(1): >>44470200 #
1. adastra22 ◴[] No.44470200[source]
This isn’t like lottery odds. The space of keys here is vast. Like unimaginably so. 2^256 is a lot of keys.

If someone had a faster method for breaking elliptic curve keys, fast enough to have a realistic chance on GPUs, the repercussions for that would be waaaaaay larger than merely stealing some bitcoin. This is the same math upon which nearly all digital security in common use today is based. It’d be full-on cryptopocalypse.

replies(3): >>44470302 #>>44470339 #>>44470774 #
2. jjmarr ◴[] No.44470302[source]
"larger than merely stealing some Bitcoin"

It's US$2 billion. I can't imagine a better way of monetizing such an exploit than to convert it into cash by using Bitcoin.

The US govt can't pay you US$2 billion without it showing up as a line item in the federal budget. That's like 20% of the NSA's funding. You'd have to get authorization from the President and hold some emergency session of Congress. Other governments would pay less.

Hacking the normal banking system is also challenging. If you steal US$2 billion someone is going to notice and simply undo the transaction because banking doesn't believe in "code as law".

replies(1): >>44477654 #
3. kristopolous ◴[] No.44470339[source]
You're looking at it wrong. There doesn't need to be a generalizable, embarrassingly parallel, computationally lower class, key reduction.

Just this specific implementation with these specific wallets maybe using a version of the btc code with a small recently discovered bug that existed say for 3 months in 2011

You can have something extremely localized and get this result. And this is exactly the behavior people have long game theoried would happen under such a scenario.

You're implicitly making the claim that just because you can't find something widely discussed in literature than any optimization of any kind is impossible and nobody would ever dare to keep an advantage in stealing bitcoin wallets secret.

Stuxnet is way less plausible than this yet that happened.

People have been trying to do this for a decade and have in aggregate thrown probably north of $100 million into it through separate efforts. The idea of someone finally succeeding is kind of expected.

Again the only claim I'm making here is that this is not only a non-zero chance, but, in my mind, an over 90%.

4. logsr ◴[] No.44470774[source]
the most likely weakness is in the ECC implementation. i don't understand the math (who does?) but what the debate over https://safecurves.cr.yp.to/ tells me is that very few people know what a "weak curve" is but people agree that they exist. this has always made me sketch on ECC in general, especially since it is also used in Tor. Another possibility is compromising the RNG used for creating the pvt sig? which since these are early addresses they would have been from a very early version of the software, and might have used a shitty RNG. If this is a crack it could definitely be state level actors (who has the US pissed off lately? who have they not?). Whether it is state/private the goal would be to extract as much real money as possible before creating a panic, so will be interesting to see where the money goes.
replies(1): >>44471602 #
5. adastra22 ◴[] No.44471602[source]
FYI the “safe curves” charts are garbage self-promotion for his own crypto algorithms. I generally respect DJB, but he didn’t even try to be unbiased with that analysis.
6. adastra22 ◴[] No.44477654[source]
Changing global politics (e.g. allowing the complete decryption of diplomatic messages) has a value and magnitude of impact that is not easily measured in dollar terms.