When a client named Rusty contacted crypto recovery specialist Chris Brooks in 2021, he said he and two others had won 5,000 Bitcoin in a court case, worth around $53 million at the time.
They immediately set up a Zoom call to discuss the case.
“There were three guys on the call, and one of them holds up a phone. It has like $53 million in a Bitcoin address,” says Brooks, founder and chief executive of Crypto Asset Recovery.
The men claimed they were able to withdraw as much as $300,000 a week but wanted to get the whole fortune out. If Brooks and his son, Charlie, flew to Georgia to help them crack the wallet, they would make them millionaires.
Brooks and son bought plane tickets and went the next day.
At lunch, Rusty, a 6-foot-3 Army veteran, revealed the wallet didn’t only contain 5000 BTC.
“Rusty pulls out his phone, and he shows us a billion dollars in ETH. And that’s when I was like, okay, something very odd is going on here.”
The men then drove about an hour to a strip mall owned by one of them, where they went into the back office and were handed notebooks containing dozens of recovery seeds. The pair spent the day opening wallets.
They found about $10 in Bitcoin.
Brooks never established whether the wallets they were given had previously held the BTC or ETH Rusty claimed to own. They were never reimbursed for the flight tickets either.
Related: Do the Coldcard attacks mean all hardware wallets are now insecure?
Brooks now suspects Rusty had fallen victim to scammers who convinced him he had a large crypto fortune when he didn’t.
It was an early lesson for their crypto recovery business.
Sometimes crypto is lost. Sometimes the wallet is lost. Sometimes the password is lost.
And sometimes, it turns out, the money was never there in the first place.
Losing your crypto doesn’t always mean it’s gone
For wallet recovery specialists, “lost crypto” can mean several very different things.
They aren’t recovering Bitcoin from the blockchain; they’re recovering the information needed to access a wallet that already exists.
While someone may have thrown away a hardware wallet, forgotten a password or part of their seed phrase, none of those things necessarily mean the underlying crypto has disappeared.
Bruno Krauss, co-founder and chief technical officer of recovery firm ReWallet, tells Magazine:
“If you have some missing words, then you can often recover them.”
Bitcoin’s BIP39 seed phrase standard uses a list of 2,048 words, meaning that if someone knows most of the words, specialists can sometimes systematically search the remaining possibilities. The fewer pieces missing, the more manageable the puzzle.
Password recovery can work in much the same way.
Bitcoin’s BIP39 standard uses a list of 2,048 words. Source: GitHub
Krauss says ReWallet once recovered a 20-character password protecting roughly $3 million after reverse-engineering a flawed password generator.
Other cases depend less on technical exploits than on understanding how a particular person creates passwords.
That means asking clients about personal preferences like favorite foods and places, children’s names and birthdays, personal milestones or memories.
In one case, he says a customer was convinced she had used her children’s names, only to remember that the password was actually a phone number connected to a local delivery service:
“She didn’t know why, but then she thought about it, and she realized, oh, okay, it was because on this day I got the package delivered to the store and I thought, okay, this would be a nice password.”
Passphrases add another layer of complexity
Tom Bennet, a Bitcoin educator who has studied wallet security, says there is another particularly confusing category: the passphrase.
A passphrase is an additional piece of information layered on top of a seed. Enter a different passphrase, and you don’t necessarily get an error message. You can simply get another valid wallet. He tells Magazine:
“A wrong passphrase doesn’t throw an error; it succeeds and shows you a zero balance.”
So you can have the correct seed phrase and enter it correctly, and still think your BTC has vanished.
“Passphrases also don’t have any features to protect users from themselves; no list of 2,048 valid words, no checksum. So if you’ve forgotten a passphrase, it’s basically the same question again: how random was your passphrase? If it’s sufficiently random, there’s often no way to recover it.”
With lost or broken hardware wallets, even having the broken device isn’t always much help. If the wallet’s backup seed phrase survives, the keys can generally be restored on another device.
That’s why recovery specialists don’t necessarily need the original hardware, but enough information to reconstruct access to the keys.
Related: Irish police open Bitcoin wallet years after keys were apparently lost
Recovery can also mean fixing mistakes rather than recovering a lost wallet. Crypto sent to the wrong…
cointelegraph.com