Password Forgotten for 11 Years, Rs 25 Crore Bitcoin Wallet Cracked
In an astonishing turn of events, a security researcher has successfully cracked a long-lost password, recovering over Rs 25 crore worth of Bitcoin that had been inaccessible for 11 years.
This incredible feat was achieved by electrical engineer Joe Grand, also known by his handle 'Kingpin,' who was hired to hack into an encrypted file containing 43.6 BTC, locked away since 2013.
The saga began over a decade ago when the wallet's owner, choosing to remain anonymous, used a random password generator called Roboform to create a highly secure 20-character password.
This password, consisting of upper and lower case letters and numbers, was stored in a text file that was subsequently encrypted.
Unfortunately, the encrypted part of the owner's computer became corrupted, resulting in the loss of the password.
At the time, the value of Bitcoin in the wallet was a few thousand euros—painful to lose, but not catastrophic.
However, as Bitcoin's value soared over the next decade, the worth of the lost Bitcoin ballooned into a fortune, prompting the owner to seek professional help.
Initially hesitant, Joe Grand eventually took on the challenge, developing a novel approach to hack the initial password generator.
Grand's breakthrough came through the use of a reverse engineering tool developed by the US National Security Agency (NSA).
By disassembling the password generator's code, he uncovered a critical flaw. Despite Roboform's promise of unique, random passwords, older versions of the software produced predictable outputs if the timing could be controlled.
"In this version of Roboform, if we can control the time, we can control the password," Grand explained.
With only a rough idea of when the password was generated, Grand and his colleague Bruno painstakingly generated millions of potential passwords.
After exhaustive efforts, they finally hit the right combination, unlocking the Bitcoin fortune.
This remarkable story underscores both the potential vulnerabilities in supposedly secure systems and the staggering value of forgotten digital assets.
While Roboform has since updated its software to prevent such exploits, the success of Grand's method highlights the evolving nature of cybersecurity challenges.
Joe Grand now aims to assist more individuals locked out of their crypto wallets, though he acknowledges that future recoveries may require even more innovative approaches.
"If this project required hacking time, what dimension are we going to have to hack next?" he mused.
Comments
Post a Comment
Good days are on the way...