What's the best tool to crack a Blockchain.info version 0 wallet?

https://github.com/magnumripper/JohnTheRipper/issues/2164 says use btcrecover
https://github.com/gurnec/btcrecover/issues/97#issuecomment-322803105 seems to suggest JohnTheRipper

So which is it? I have tried btcrecover using the tokens which I thought were in the password without success. So will need to try a dictionary approach (1-2 words followed by 0-4 digits).

Also, i seem to have two different versions of the same wallet.aes.json. The one they sent in the original email in early 2012 and the one that is downloaded when i call the


How can this be, unless they held the original unencrypted wallet and use two different methods (e.g. different PBKDF2 key stretching)?

Finally, can anyone tell me whether the 10 character minimum password length was mandatory during early 2012?

The site says this today....  fingers crossed




Important Notice About the Allcoin.com Takeover

Dear Allcoin customers, thank you and other customers being with us until now, we did have troubles a month ago and we have to close the exchange temporarily.

Our team has received an offer from a very strong company in the industry. After comprehensive consideration, we believe that the acquisition will be Allcoin's best choice.

The new website will replace Allcoin's site system, all user accounts will be reserved. However due to the system switching user assets will not be transferred directly to the new platform, therefore please make sure to withdraw all your Allcoin digital currency funds within 30 days.

Because we've sold out the domain, so we'll use another domain to withdraw you coins in one or two weeks, then you can find the withdraw domain on this page. We'll try our best to fix the wallets and withdraw your coins.

Thank you for your support. In future new AllCoin.com will provide a better service for you!

AllCoin Dev team.

2015-12-16

That's a nice find.

That 5 btc balance has accumulated by weeks of deposits. There hasn't been any withdrawals for over a month.

I don't suppose anyone has tried to deduce allcoin's bitcoin wallet addresses from the blockchain to see if the money is still there?

I have deposit addresses at allcoin of:

1F38dRunLasAYM6x9yWDxFEM1eUv8qaFTx for BTC (I have LTC and XRP addresses too)

So looking at:
https://blockchain.info/address/1F38dRunLasAYM6x9yWDxFEM1eUv8qaFTx

It would seem reasonable that:
https://blockchain.info/address/1tsK4jdcUMmDCX74qZcjHyjHUwuQad4Bg

is an Allcoin address - n'est pas? (volumes seem about right for a small exchange)

But one of many - so is it a pointless exercise?

I almost closed my allcoin account numerous times in the past 12 months. My account kept getting frozen and the penultimate time was a few months ago when it took a couple of weeks for Mark? to unfreeze my account. It was pretty obvious it was a one man operation. I also didn't think he was making that much money. The volume of all the alt coins on this exchange has always been very small (going by http://coinmarketcap.com/exchanges/allcoin/ - this doesn't show historic volumes). And if he was only making 0.5% of that, well I did wonder how long he would be motivated.

So I reduced my holdings there from 4 to 3 btc. I couldn't bring myself to close out because I had made over 3 btc in the previous month. I reasoned that as it was "profit" it was worth the risk. Greed over sense. I've been taught that old lesson again.

Still I would like to believe in Mark's integrity, he didn't strike me as a fraud. I therefore would give him the benefit of the doubt and say the closure might be from sudden illness, or 3rd party theft of coins scenarios.   

Would the SSL cert change require manual intervention?
Might it be a hosted solution so that this is handled by a 3rd party?
I have seen reports in other posts that some support was done about a month ago.
Anyone's guess.

There is a possibility that they have (or should it be he has) a major incident to handle, so whilst the server is still up there is still hope.

See https://bitcointalk.org/index.php?topic=1156268.msg12210597#msg12210597

Has anyone had a response from allcoin support within the last 30 days?

I won't speculate as to the reasons, but this exchange does not look like a good risk.

Allcoin has been reasonably profitable for me in the past, so even though I stand to lose 17% of my total coinage, the potential closure of the exchange itself is more saddening.

I still hold out some hope, while the site is operational.

@Kn_os i am in the same situation. their support seems to have gone on holiday! let's hope it is not permanent.

Hi thedreamer

Did you ever get your coins?

My account is locked out and has been for over a week.

cool, i'd look kinda good for an 97 year old. got ta get me some of that.

and what to do if the engineer or auditor cannot resist £5m?

if someone walked into their datacenter and used a flashdrive, then they are probably in a police cell as we speak. unfortunately the law in the uk takes a long time, which doesn't bode well for a quick resolution.

yes, i agree. it is similar. now, a hacker cannot steal a digital iou, as they could only redeem it from the issuer who would recognise it as stolen and not accept it. the often cited weakness in ripple iou's has benefit in this case.

i suppose i had a lucky escape, i never saw reason to keep coins in the bitstamp exchange. i traded out of my bitstamp iou's on rippletrade when the prices went out of sync. i had to take a poor ask price in ripples but at least i got my money. the bitstamp gateway was open long after the initial announcement, and i thought i was being a little paranoid by bailing out with a haircut of about 2%.

now my ~bitstamp iou balance is nil, i had some dust in there. will be interesting to see if it comes back. anyone else see this?