I already did.


The onus is to on the attacked to insure they are safe and disprove, not on me to go develop the attack that is claimed. The BTC I was offered in a bounty had no requirement for me to show how to attack private keys. Per agreements in the private messages with Risto and the developers, I only had to show an attack on the anonymity for which they don't already have mitigation in place. I did the private key investigation for free. I was just trying to think about possibilities.