@abadon666999  has asked about how to discover two privatekeys when we have two transactions with the same r but with differents pubkeys.

So he didn't inform that he know the first privatekey.

So yours "calculation" above are wrong in this case.

Of course according "modificate algebra as triangle" can be used for explore this topic.


but still it is expensive as power which we need to solve with LLL reduction.