Hacker News new | ask | show | jobs
by hjorthjort 1644 days ago
I've noticed that there are a few hardcoded ones on the final page, where the account exists and the key is wrong.

I'd say odds are that the website is wrong, but you can always load those keys in a wallet and see if they give you control over the actual address.

If that works, I'd assume it's the case that some people have used weak keys (for example, a popular Ethereum wallet would actually generate 256 bits of entropy but accidentally truncate it to 32 bits in an operation), and any funds in those wallets will have been snagged long ago.

Point being: generate a private key properly, and no one will ever find it.

EDIT: I realize this is another page then the one I've seen previously, but I think the same idea applies. That one had support for Ethereum, too, and on the final page was an account with a balance.

1 comments

wow, the private key with 10.28 eth can't be imported anywhere. The others work and are already being emptied. One way to lose your money for sure.

EDIT: the aforementioned wallet can also be found as the 0x00 wallet on the very first page. Interesting collision?

EDIT2: it's hardcoded https://github.com/SjorsO/keys-generator/blob/master/ethereu...

Why it cant be imported anywhere?
it's the maximum private key https://github.com/ethereum/go-ethereum/blob/master/crypto/c... - so the public key is actually just a example and not the real public key for that private key.