Recovered: Hackers Successfully Gain Access to Decade-Old Bitcoin Wallet, Retrieve $3 Million
In an astonishing turn of events, two hackers have successfully cracked the long-forgotten password of a digital wallet, resulting in the recovery of approximately $2 million worth of Bitcoin (BTC).
Uncovering a Lost Bitcoin Fortune
According to Wired, the story began back in 2013 when an individual using the pseudonym “Michael” securely stored his Bitcoin holdings in a password-protected digital wallet. However, over time, he lost access to the wallet due to a corrupted file that contained the 20-character password generated by the RoboForm password manager.
Despite Michael’s efforts to prioritize security, his reservations about potential hacking led him to avoid storing the password in his manager, inadvertently locking himself out of his fortune.
Enter Joe Grand, a highly regarded electrical engineer and hardware hacker known as “Kingpin.” In 2022, Grand gained recognition for assisting another cryptocurrency wallet owner in recovering $2 million worth of digital assets after forgetting the PIN to his Trezor wallet. Since then, numerous individuals have sought Grand’s expertise, but he selects his projects carefully.
Michael initially reached out to Grand two years ago, seeking help in recovering his lost Bitcoin. However, due to the unique challenges posed by a software-based wallet, Grand declined the request.
Nevertheless, Michael persisted, and in June of last year, Grand agreed to give it another shot, teaming up with a fellow hacker named Bruno from Germany.
Months of diligent reverse engineering led Grand and Bruno to a significant breakthrough. They discovered a flaw in the pseudo-random number generator used by the RoboForm program, which Michael had used in 2013.
The flaw linked the generated passwords to the date and time on the user’s computer, making them predictable. Armed with this knowledge, the hackers devised a plan to exploit the flaw and crack the password.
The main hurdle in this process was Michael’s inability to recall the exact date when the password was generated. However, armed with the knowledge that Bitcoin had been transferred into the wallet for the first time on April 14, 2013, Grand and Bruno configured RoboForm to generate passwords within a specific timeframe, utilizing the parameters used by Michael.
From Forgotten to Found
Despite initial unsuccessful attempts, Grand and Bruno persisted, adjusting the timeframe and parameters until they finally struck gold. On November 15, 2023, they discovered the correct password – a 20-character string generated on May 15, 2013. The long-lost Bitcoin treasure was finally within Michael’s reach.
However, the report raises concerns about password security, particularly for users who generated passwords using earlier versions of RoboForm. While the company behind RoboForm claims to have resolved the flaw in 2015, questions remain about the vulnerability of older passwords. Grand emphasizes the importance of understanding the improvements in password generation found in newer versions.
Regaining access to his Bitcoin, Michael received another stroke of luck. He waited for the value of Bitcoin to rise before selling a portion of his newfound fortune. With 30 BTC currently valued at $3 million, Michael eagerly anticipates the potential for even greater returns as he sets his sights on a future surge to $100,000 per coin.
At the time of writing, the leading cryptocurrency is trading at $68,200, consolidating around the key $70,000 threshold that is critical for BTC’s upward momentum.