Ссылка

Original research & reference

Primary research from the KeychainX — the vulnerabilities, encoding failures, legacy formats and on-chain data behind lost and dormant crypto. This is the work we’re known for, and the source others cite.

Vulnerability research · data studies · wallet-format forensics

Weak randomness & named vulnerabilities

• Weak randomness in crypto wallets — an overview · start here
  The survey that ties Randstorm, MilkSad, Android SecureRandom, Trust Wallet and the presale PRNG together.
• Randstorm: 2011–2015 BitcoinJS wallets
  The weak-RNG flaw that made millions of early browser wallets predictable.
• MilkSad (CVE-2023-39910)
  The libbitcoin bx seed weakness — a Mersenne Twister seeded from 32-bit time.
• The 2013 Android SecureRandom flaw
  How repeated ECDSA nonces leaked Bitcoin private keys from public transactions.

Ethereum presale

• Why a “correct” presale password fails
  The encoding & normalization failure modes that block valid 2014 presale passwords.
• The presale PRNG & IV weakness
  Original research: Math.random-seeded IVs and the Firefox entropy collapse.
• How much presale ETH has never moved · publish after nonce re-verification
  A data study of the dormant 2014 cohort.
• The Lost Crypto Index · living dataset
  A living dataset of dormant presale ETH, updated each cycle.

Wallet-format & key-derivation forensics

• Blockchain.info legacy formats (v0–v3)
  The evolving encryption and the non-BIP39 15–21 word mnemonic scheme.
• The MultiBit special-character bug
  How special characters were mangled before encryption — and how it’s reversed.
• Trezor derivation-path forensics
  Why a restored Trezor can look empty, and how a path sweep recovers it.
• BIP32 non-hardened escalation
  How an xpub plus one child key can rebuild a whole wallet branch.
• Armory encryption & the ROMIX KDF
  Why Armory recovery is a precision search, not brute force.