Using weak seed phrases means instant loss of funds on the Bitcoin network.
The concept of a blockchain "dark forest" has been popularized recently by Ethereum and the existence of front-running bots that will copy any profitable transaction pending for submission.
The bots are able to assess if any given transaction that just entered the mempool can be replicated, and they will immediately publish their own copy with a much higher gas fee, which virtually guarantees that they will be the first to claim it. The term "dark forest" is inspired from a sci-fi novel and indicates a place where detection means instant death — or in this case loss of funds.
In Ethereum, this usually happens with public smart contracts that for some reason came in control of funds. Dan Robinson from Paradigm Capital demonstrated one such case with money mistakenly sent to a contract address. These types of bots also threw a wrench into Bancor’s vulnerability mitigation plan in June.
Bitcoin (BTC) does not have smart contracts to front-run, but a post by BitMEX Research highlights how a similar event occurs when one uses brainwallets.
A brainwallet is the term for a private key that is only stored as a memory in a person’s brain, meaning that no physical backups exist. This approach is generally discouraged because relying on a person's memory to store a complex alphanumeric string is not ideal.
A potential solution to this is creating a wallet from an easy to remember phrase. This is what the analysts did by generating a seed phrase from extracts of famous literary works, including the Bitcoin whitepaper.
Unfortunately, in some cases the BTC put into these wallets was swept away even before the transaction to fund them was confirmed. This was the case with simple seed words like “Call me Ishmael” from Herman Melville’s Moby Dick. Other longer and more complex excerpts were still swept within a day, with the Bitcoin whitepaper’s “The network is robust in its unstructured simplicity” lasting the longest.
The analysts concluded that addresses generated from these types of complex, but public-domain seed words are fully compromised and are constantly being monitored.
As Cointelegraph reported earlier, blockchain makes it hard to use any type of password-based generation mechanism. Passwords on traditional platforms are mostly protected by the fact that they’re stored on a secret database. The attackers must interact with it to make guesses, but the server will usually issue rate limit denials. Furthermore, having to make a web request to make a guess is already many times slower than hashing through locally-stored combinations.
Blockchain private keys can instead be pre-generated from massive dictionary databases, making attackers the effective owners of those addresses. There are ways to mitigate these vulnerabilities by using salt — random bits of data added to throw off brute force attempts. But the fundamental issue of brainwallets is that any address that is sufficiently resistant to brute forcing will likely be difficult to remember reliably.
There are many stories of people losing their BTC by forgetting a private key they stored in their brain, with one notable loss of $13 million reported in 2019 — though some believe it was fake. Ethereum is likely subjected to the same type of private key brute forcing, with millions of dollars in Ether (ETH) being reportedly stolen in the past.
Information on these pages contains forward-looking statements that involve risks and uncertainties. Markets and instruments profiled on this page are for informational purposes only and should not in any way come across as a recommendation to buy or sell in these assets. You should do your own thorough research before making any investment decisions. FXStreet does not in any way guarantee that this information is free from mistakes, errors, or material misstatements. It also does not guarantee that this information is of a timely nature. Investing in Open Markets involves a great deal of risk, including the loss of all or a portion of your investment, as well as emotional distress. All risks, losses and costs associated with investing, including total loss of principal, are your responsibility. The views and opinions expressed in this article are those of the authors and do not necessarily reflect the official policy or position of FXStreet nor its advertisers.
Recommended Content
Editors’ Picks
Is Altcoin Season here as Bitcoin reaches a new all-time high?
Bitcoin reaches a new all-time high of $98,384 on Thursday, with altcoins following the suit. Reports highlight that the recent surge in altcoins was fueled by the victory of crypto-friendly candidate Donal Trump in the US presidential election.
Shanghai court confirms legal recognition of crypto ownership
A Shanghai court has confirmed that owning digital assets, including Bitcoin, is legal under Chinese law. Judge Sun Jie of the Shanghai Songjiang People’s Court shared this opinion through the WeChat account of the Shanghai High People’s Court.
BTC hits an all-time high above $97,850, inches away from the $100K mark
Bitcoin hit a new all-time high of $97,852 on Thursday, and the technical outlook suggests a possible continuation of the rally to $100,000. BTC futures have surged past the $100,000 price mark on Deribit, and Lookonchain data shows whales are accumulating.
Shiba Inu holders withdraw 1.67 trillion SHIB tokens from exchange
Shiba Inu trades slightly higher, around $0.000024, on Thursday after declining more than 5% the previous week. SHIB’s on-chain metrics project a bullish outlook as holders accumulate recent dips, and dormant wallets are on the move, all pointing to a recovery in the cards.
Bitcoin: New high of $100K or correction to $78K?
Bitcoin surged to a new all-time high of $93,265 in the first half of the week, followed by a slight decline in the latter half. Reports highlight that Bitcoin’s current level is still not overvalued and could target levels above $100,000 in the coming weeks.
Best Forex Brokers with Low Spreads
VERIFIED Low spreads are crucial for reducing trading costs. Explore top Forex brokers offering competitive spreads and high leverage. Compare options for EUR/USD, GBP/USD, USD/JPY, and Gold.