Ninjastic
Home
Search
Users
Boards
Addresses
Ctrl + K
Toggle theme
Open menu
Post
Edited versions
Quotes to this post
Post
54444963
Topic
5247201
Board
Bitcoin Technical Support
Merits
21 from 7 users
Re: Why has my newly created Bitcoin address already been used?
by
SimpleVv0
on
16/05/2020, 20:36:37 UTC
⭐ Merited by
LoyceV
(6) ,
suchmoon
(4) ,
hugeblack
(3) ,
OmegaStarScream
(3) ,
ETFbitcoin
(2) ,
o_e_l_e_o
(2) ,
PrimeNumber7
(1)
It's obviously scam, person who bought walletgenerator, has also bitcoinpaperwallet.
After some research, please look at this:
https://medium.com/mycrypto/disclosure-key-generation-vulnerability-found-on-walletgenerator-net-potentially-malicious-3d8936485961
and then you can find directory listing is enabled:
https://bitcoinpaperwallet.com/bitcoinpaperwallet/
and finally this modified website:
https://bitcoinpaperwallet.com/bitcoinpaperwallet/generate-walletfe23t9u2fhjnj3f32.html
random generator is broken in same way as in the article:
Code:
var coinImgUrl = "https://bitcoinpaperwallet.com/bitcoinpaperwallet/images/logo-" + whichDesign + ".png";
...
var base64 = "data:image/png;base64," + btoa([].reduce.call(new Uint8Array(this.response),function(p,c){return p+String.fromCharCode(c)},''));
for(var i = 0; i < base64.length; i++)
{
if(i+3 < base64.length)
{
if(base64.charCodeAt(i) != 0 && base64.charCodeAt(i+1) != 0 && base64.charCodeAt(i+2) != 0 && base64.charCodeAt(i) != 1 && base64.charCodeAt(i+1) != 1 && base64.charCodeAt(i+2) != 1)
{
SecureRandom.seedInt((base64.charCodeAt(i) * base64.charCodeAt(i+1) * base64.charCodeAt(i+2))*(i+1));
}
}
}
SecureRandom.loaded = 1;
};
So, beware of bitcoinpaperwallet.com and walletgenerator.net, they will steal your coins !!!