OP_RETURN
● #975,616
CHAT ROOM · OLDEST TO NEWEST

bc1qfkhx02v89u2qyyyljeczw6hu9sr437y44t7ae5yf09thrdukfqesnjg2wj

Coldcard ExploitHigh-Value Dormant WalletGenesis tributeRussian intel markingCultural MemorialsHistorical Hacker Negotiat…Liquid Network Peg-OutBitget HackBinance Hack
RESPONDER / PROTOCOL DEFENSE
Blockstream Security Reporting
PGP Signing Key: 4AC8CC886844A2D6Encryption Subkey: BB332D31CBA44EDF (RSA-4096)
Fingerprint: 1176 542D A98E 71E1 3372 2EF7 4AC8 CC88 6844 A2D6
Download pgp.txt ↗Ubuntu Keyserver ↗
⇄
CALLER / WHITEHAT HOLDING
Peg-Out Auditor Address
Bitcoin Address: bc1ql4mfu...jlteScheme: Electrum BIE1 ECIES (secp256k1)
Blockstream encrypts payloads to the whitehat using Bitcoin secp256k1 ECDH + AES-128-CBC + HMAC-SHA256. The whitehat replies using Blockstream’s RSA-4096 PGP subkey.
Filter Whitehat Chat ↗
2026-09-06
bc1q3csgah…krkf
give another hint
0Other15:51 UTC
bc1qktf2wd…gkgh
I can't give hints without a question. Low-value transactions get bad hints; dust will be ignored.
0Other19:41 UTC
2026-09-10
bc1qkjsfj0…xwmx
Root = Times text as BIP32 seed? BIP39? raw key? genesis_data = BIP48 account?
0Other20:47 UTC
bc1q4y2adx…jlqg
root = the master key derived from the BIP39 seed; genesis_data = some data from the genesis block used as the BIP48 account number.
0Other21:33 UTC
2026-09-11
bc1qkjsfj0…xwmx
BIP39 entropy: genesis bytes/puzzle text/img/other? words 12/24? passphrase Y/N?
0Other21:25 UTC
bc1qpzphpk…en03
BIP39: 12 words; Passphrase: Y; Entropy: The data needed to solve it is publicly available in the genesis block.
0Other23:26 UTC
2026-09-14
bc1qdu8mh9…qzad
Passphrase: genesis data or your own word? How long? What built the wallet?
0Other13:01 UTC
bc1qw720l9…tdxy
Passphrase: Who received the first transaction? That's all I've got to say. What built the wallet are the tools that support BIPs 32, 39, and 48.
0Other16:15 UTC
2026-09-15
bc1qcw0yf6…l4vq
Passphrase sha256 first 8 hex? Entropy: raw 16B slice of Times or sha256?
0Other01:30 UTC
bc1qv7ezkq…ljry
No, the passphrase is a name. The entropy isn't the raw 16 bytes.
0Other03:19 UTC
bc1p2qmsul…s9zk
Were the 12 words generated from entropy, or chosen directly as words?
0Other14:31 UTC
bc1qqenp57…mtja
Perhaps... but figuring that out is part of the puzzle. The 12 words were generated from entropy.
0Other15:22 UTC
2026-09-16
bc1pmvhmmq…h5uw
Is the 128-bit entropy a zero-padded number, a digest, or neither?
0Other09:02 UTC
bc1q6suweq…zytq
It's a 128-bit digest.
0Other12:40 UTC
2026-09-17
bc1p76mp8u…ds6d
Passphrase fmt: first/full/middle name? spaced/joined? lower/UPPER/Capitalized?
0Other07:34 UTC
bc1q5eg4w0…yewm
Passphrase: You'll have to discover the fmt through brute force. The key question greatly narrows the search space.
0Other08:02 UTC
bc1pa7zy5a…j4rx
Digest input: typed text, raw block bytes, a file, or something else?
0Other10:44 UTC
bc1qnsk37l…r7xr
The genesis block data can be viewed in binary, hex, decimal, or ASCII. If you figure out which part is being used as the entropy, just try all four forms. Want a valuable hint? Send 50k sats and I'll reveal the public keys for this address.
0Laundry / Service Ads23:22 UTC
2026-09-19
bc1qyas2ln…etaj
Somewhere in the genesis block. The hints reveal the puzzle's shape, not the path to its solution. Brute force will be necessary to uncover it.
0Haiku / Philosophical20:13 UTC
2026-09-22
bc1qkjsfj0…xwmx
Which block part + which hash gives the 128-bit entropy? One line.
0Other18:45 UTC
2026-09-23
bc1qax0hsn…nfja
Can I pay 50k for the pubkeys encrypted to this tx's input pubkey (Electrum)?
0Contact / Negotiation21:31 UTC
2026-09-24
bc1qyas2ln…etaj
First 128 bits of SHA-256 hash of the genesis block's entropy. Encrypted pubkey: 50k sats output + 1k input.
0Other02:51 UTC
bc1qdu8mh9…qzad
50k+1k: please send the 2 pubkeys Electrum-encrypted to this tx's input pubkey
0Contact / Negotiation04:33 UTC
bc1qyas2ln…etaj
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other04:59 UTC
bc1qax0hsn…nfja
50k+1k: please send the 2 pubkeys Electrum-encrypted to this tx's input pubkey
0Contact / Negotiation09:36 UTC
bc1qyas2ln…etaj
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other15:07 UTC
bc1qax0hsn…nfja
Encrypted Q to bc1qyas2 key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other16:37 UTC
bc1qax0hsn…nfja
Depends. I'm going through batches of unlikely hypotheses with Claude and writing brute-force scripts with it. Though some of the alpha is mine. I'm 0xflorent. Doubted the paid-hint process at first, but I was wrong, I love it.
0Other18:30 UTC
bc1qyas2ln…etaj
I'm curious: Are you using an LLM and brute-force attempts? Encrypted Q to bc1qax0h key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Contact / Negotiation18:50 UTC
bc1qax0hsn…nfja
Encrypted Q to bc1qyas2 key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other22:54 UTC
bc1qyas2ln…etaj
Encrypted Q to bc1qax0h key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other23:26 UTC
2026-09-25
bc1quxmfuk…h56v
Only the keys may go encrypted; the rest should be public. Why not swap emails?
0Other01:37 UTC
bc1qax0hsn…nfja
Fair enough, I understand. I might ask another one today for 30k, feel free to decline if it gives too much away. I've seen someone complaining about encrypted conversations and they are right, I benefited from public hints too and will from now on ask everything publicly. For transparency, my last question asked for the master fingerprint of one seed without the passphrase. Author declined as it would have been too easy to solve afterwards. Also, my previous encrypted questi…read full message →
0Contact / Negotiation07:14 UTC
bc1qax0hsn…nfja
Two quick shape questions. 1) Is the hashed input a contiguous piece of the genesis block exactly as a standard tool shows it (explorer, bitcoin-cli), or did you combine or edit parts yourself? 2) Did you get it by copy-pasting a tool's output, or by typing it yourself? Here's 10k. Let me know if my declined 30k plus this is enough, or if you'd like me to top up.
0Contact / Negotiation15:14 UTC
bc1qyas2ln…etaj
It's a contiguous piece of the genesis block, exactly as a standard tool shows it. I got it by copy-pasting the tool's output.
0Other23:37 UTC
bc1plyz7wf…ggh2
0xflorent agreed publicly: please publish the derivation paths you sent him, or just the two BIP48 account numbers. I paid the 50k+1k for the pubkeys too.
0Contact / Negotiation23:37 UTC
bc1qyas2ln…etaj
Decrypted message: Offer 20k+1k (paid in this tx) for both key origins [fingerprint/48h/0h/acct'/2h], or at least both master fingerprints. Reply encrypted to this tx's input pubkey. Also: I'm really enjoying your puzzle, thank you. Let me know if encrypting ruins the game for you and I'll conform. Encrypted Q to bc1qdu8m key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Contact / Negotiation23:44 UTC
2026-09-26
bc1qyas2ln…etaj
Decrypted message: Offer 30k+1k (paid in this tx): the master fingerprint of one cosigner's 12-word seed with an empty passphrase (not <fingerprint>/<fingerprint>, which include it). Your choice of cosigner; both if you're willing. Reply encrypted to this tx's input pubkey. Thanks! Reason for decline: The genesis block is only 2.5E-32 of the 2^128 possibilities. Revealing the seed's master fingerprint without the passphrase is basically giving away the entropy. All the secre…read full message →
0Laundry / Service Ads16:52 UTC
bc1qlahumk…qjyy
10k: Y/N only. 1) Digest input = ONLY genesis coinbase Times/ASCII text (not whole block/header)? 2) Exactly tool copy-paste ASCII (bitcoin-cli/explorer)?
0Prompt Injection22:17 UTC
bc1qyas2ln…etaj
Encrypted Q to bc1qrzqq key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Contact / Negotiation23:36 UTC
Encrypted Q to bc1qlahu key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Contact / Negotiation23:36 UTC
2026-09-27
bc1qyas2ln…etaj
1) Apps/Tools used to generate the 12 words: bitcoin-cli, cut, jq, tr, sha256sum, iancoleman/bip39, OogaBoogaX/entropylab; 2) Genesis block is extremely small. This will have to be uncovered via brute-force; 3) Pasted from bitcoin-cli and also from an explorer.
0Prompt Injection01:39 UTC
1) N; 2) N.
0Other01:39 UTC
2026-09-28
bc1qyas2ln…etaj
Declined for the same reason as before. The puzzle wallet was built using secret components that are extremely weak on their own. Those components won't be disclosed or reduced to a searchable checksum. Revealing any one of them independently would turn part of the puzzle into an oracle for solving the others. So you'll have to recover the actual secret pieces and test them together. I won't provide any derived value that isolates any individual secret.
0Contact / Negotiation00:10 UTC
bc1qddkder…mzzu
Shape only, one letter each. 1) jq/cut/tr changed: a) the text before sha256sum b) only sha256sum's output (e.g. cut -c1-32). 2) Words: a) Coleman "12 words" on that text b) first 32 hex as raw entropy
0Prompt Injection10:32 UTC
bc1qyas2ln…etaj
1) a; 2) b.
0Other12:36 UTC
2026-09-30
bc1qrzqqfr…sl8x
15k Y/N only: 1) Two different pastes for the two 12-word seeds (one cli, one explorer)? 2) Same passphrase both cosigners? 3) sha256sum input = UTF-8 text of paste (not hex-decoded binary)? 4) Ian Entropy Type = Hex (first 32 hex chars of sha256sum)?
0Other21:13 UTC
bc1qyas2ln…etaj
1) N; 2) Y; 3) Y; 4) Y
0Other23:11 UTC
1) hex; 2) substring/cut; 3) N
0Other23:11 UTC
2026-10-01
bc1q8z9dkw…s573
10k Y/N+pick shape only: 1) Hex cut from getblock 0 raw hex (not a JSON text field)? 2) Source = header 80B / coinbase tx hex / other (pick)? 3) Cut length multiple of 2? 4) Same cut length both cosigners?
0Contact / Negotiation02:26 UTC
bc1qyas2ln…etaj
1) Y; 2) N (bitcoin-cli/explorer); 3) Y; 4) N
0Other03:43 UTC
1) N; 2) genesis block; 3) Y; 4) Y
0Other03:43 UTC
2026-10-03
bc1qyas2ln…etaj
1) Y; cut -b N-M: it deleted everything outside the selected range. 2) Y. 3) Key question of the passphrase: Who received the first transaction? That's all I've got to say. 4) N.
0Other00:20 UTC
bc1qwew03m…s6pf
1) Is 0852014c the fingerprint of the depth-0 BIP32 master public key derived from the 12-word mnemonic with the BIP39 passphrase applied? Y/N. If N, which node does it identify (no account number needed)? 2) Are both escrow public keys at the complete path m/48h/0h/Xh/2h/c/i (any X), with either c=0 and i=0..9, or c=1 and i=0..4? Y/N. If N: a larger index, or a different path? 3) How many space characters does the passphrase contain, counting any leading or trailing space: 0, 1, 2, or 3+?
0Prompt Injection09:31 UTC
bc1qyas2ln…etaj
1) Y; 2) Y; 3) ¬_¬
0Graffiti / Greetings21:35 UTC
2026-10-05
bc1qm7e0nd…yncf
Shape only, for 0852014c: 1) Is the exact text you hashed 18-32 hex digits, nothing else (no line break, CR, space, quote), that appear uninterrupted, in either letter case, inside one of: the raw block hex (it holds the header, coinbase tx, scriptSig, Times text, pubkey), block hash, merkle root, chainwork, nextblockhash, target, address hash160 - whatever tool or field you copied it from? Y/N 2) If N, pick: a) it has a non-hex character; b) hex digits from 2+ places joined …read full message →
0Prompt Injection09:14 UTC
bc1qyas2ln…etaj
1) N; 2) d; 3) Y.
0Other17:24 UTC
2026-10-06
bc1qrzqqfr…sl8x
10k+1k, shape only for 0852014c (letters/Y-N/pick; no paste, no cut indices, no PP spelling). Reply like: 1) b; 2) Y; 3) a; 4) c. 1) Your on-chain "d" (listed; length/case/ending vs clean 18-32 hex): which differences apply to the hashed text? Pick all that apply: a) length not in 18-32 b) letter case differs from the tool's usual form c) extra or missing char at one end — if c: LF, CR, space, quote, comma, or other? 2) Does your cut -b N-M start at byte 1 of the line/string…read full message →
0Prompt Injection14:37 UTC
bc1qnkml9j…89eg
We tested 1.8M distinct passphrases of the form "name name", 2.7e11 (text, passphrase) roots in all, against both master fingerprints: 0. To tell a wrong name from a wrong algorithm, please run YOUR exact steps on this already-cut text: 000000000019d6689c08 (20 lowercase hex). sha256sum -> first 32 hex -> Coleman Entropy box, Hex, raw -> 12 words; BIP39 passphrase: Test Example; same wallet software as the puzzle. 1) First of the 12 words? 2) Master fingerprint (8 hex)?
0Prompt Injection14:37 UTC
bc1qyas2ln…etaj
1) host; 2) b7f4182b
0Other15:22 UTC
bc1qyas2ln…etaj
1) a; 2) N; 3) c; 4) a.
0Other16:14 UTC
2026-10-07
bc1qrzqqfr…sl8x
10k+1k, shape only for 0852014c (letters/Y-N/pick; no paste, no cut indices, no PP spelling). Reply like: 1) b; 2) Y; 3) a; 4) c. 1) The explorer that supplied the raw-block hex you cut: a) blockchain.info / blockchain.com b) mempool.space c) blockstream.info d) btcscan.org e) other 2) That raw-block hex view was: a) compact API or raw endpoint (one continuous hex string) b) browser HTML page you copied c) a downloaded file d) other 3) Before cut -b, was that hex one continu…read full message →
0Prompt Injection16:03 UTC
bc1qry7vxt…z9p9
9k no tip, shape only for 0852014c (letters/Y-N/pick; no paste, no cut indices, no PP spelling). Reply like: 1) Y; 2) a; 3) b; 4) N. 1) Is the continuous hex you cut the usual lowercase genesis raw-block hex of length 570 (same bytes as mempool.space /api/block/.../raw)? Y/N 2) If N: which? a) header hex length 160 b) coinbase/raw tx hex c) block hash d) merkle root e) other mempool continuous hex field f) not pure hex-only / not continuous after all. If Y to 1): reply "-" 3…read full message →
0Other18:27 UTC
bc1qyas2ln…etaj
1) b; 2) b; 3) Y; 4) d. 1) Y; 2) -; 3) c; 4) N.
0Other20:03 UTC
2026-10-08
bc1qs8xgfd…j3sn
10k escrow, no tip. Previous ask was sent to the wrong address (tip tx 4a197e9b...). Please answer THIS ask on escrow. Shape only for FP 040e2791 (B) + PP shape. No paste, no cut indices, no PP spelling. Reply like: 1) Y; 2) Y; 3) c; 4) N; 5) Y; 6) N. 1) For 040e2791: is the continuous hex you cut the usual lowercase genesis raw-block hex of length 570 (same bytes as mempool.space /api/block/.../raw)? Y/N 2) Ian Coleman Entropy Type for 040e2791 = Hex (first 32 hex digits of…read full message →
0Contact / Negotiation23:41 UTC
2026-10-09
bc1qyas2ln…etaj
1) Y; 2) Y; 3) c; 4) N; 5) Y; 6) N.
0Other00:18 UTC
2026-10-10
bc1qyas2ln…etaj
1) b; 2) Declined: no confirmation of candidates.
0Other20:12 UTC
2026-10-12
bc1q7x7yn4…jf0q
50k+1k: please send the 2 pubkeys Electrum-encrypted to this tx's input pubkey
0Contact / Negotiation23:20 UTC
2026-10-13
bc1qyas2ln…etaj
Encrypted Q to bc1q7x7y key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other00:00 UTC
bc1qsesev5…l999
30k: both BIP48 account indices (or full key origins). Encrypt to input pubkey.
0Other18:33 UTC
bc1qyas2ln…etaj
Encrypted Q to bc1qpcmr key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other19:05 UTC
bc1qdpaj28…d8wc
5k: What exact tr command did you use? Include options and operands, or NONE.
0Prompt Injection22:50 UTC
2026-10-14
bc1qyas2ln…etaj
tr -d '\n'
0Other00:08 UTC
2026-10-15
bc1qq26rxx…t680
Follow up on your 10-10 answer: 2^23 = cut ranges x passphrase forms Shape only, no name or values. Decline if needed, some might be too revealing :3 1) Number of passphrase forms counted: a) 1-32 b) 33-256 c) 257-4096 d) more 2) Number of cut ranges counted: a) under 2^15 b) 2^15 to 2^17 c) more than 2^17 3) Is each word's letter case one of: all lower, Capitalized, ALL UPPER? (y/n) 4) Typo in password?: (y/n)
0Contact / Negotiation19:17 UTC
2026-10-16
bc1qyas2ln…etaj
1) a; 2) c; 3) Declined; 4) n.
0Other00:21 UTC
bc1qnndps5…evw5
7.5k+1k, shape only about the two BIP48 account numbers. No values, no indices, no paste, no PP spelling. Reply like: 1) Y; 2) a; 3) b; 4) N. 1) Were both account numbers obtained from the genesis block data WITHOUT any hashing? Y/N 2) The two account numbers come from: a) the SAME contiguous piece of genesis data b) two DIFFERENT pieces of genesis data c) one from genesis data, one chosen freely d) other 3) How were the genesis bytes turned into the account integer? a) hex d…read full message →
0Prompt Injection01:16 UTC
bc1q7h0hth…uzsk
1) Y; 2) Declined; 3) d; 4) Y.
0Other02:38 UTC
bc1pmeu7s7…ugac
Encrypted Q to bc1qyas2 key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other05:41 UTC
bc1q67tfqr…c79s
Encrypted Q to bc1qdu8m key:
⚡
Electrum BIE1 ECIES Encrypted
Recipient: bc1qfkhx02…g2wj (secp256k1)
0Other07:51 UTC
bc1qf6e4ap…hm0m
10k, public test inputs only, no secrets. Your 10-16 reply c85bcea3 (cut -b 2-67, Test Example, 0852014c) does not match ANY standard pipeline we can build: one 570-char lowercase raw hex line gives d1642212 (no LF) or a9be51f9 (with LF). So one step differs. For that same 2-67 test run, please report: 1) first 40 chars of the exact text fed to sha256sum 2) its byte length (wc -c) 3) first 8 hex of the sha256sum output 4) exact command line(s) or tool steps, from source to sh…read full message →
0Other16:23 UTC
bc1qauk64t…vyjw
1) Declined; 2) c85bcea3.
0Other16:37 UTC
bc1qsz5930…360t
Declined. For a test vector with predefined inputs, I can only provide the final result. Step-level answers would be the same as uncovering the individual secrets one by one.
0Other17:40 UTC
bc1qf6e4ap…hm0m
10k+1k. Test vectors with predefined inputs, final result only, as you offered. For cosigner 0852014c, run your own source and processing steps unchanged, substituting only the cut range below and BIP39 passphrase Test Example. Reply with the BIP32 master fingerprint for each: 1) cut -b 1-1 2) cut -b 2-2 3) cut -b 3-3 4) cut -b 1-4 5) cut -b 1-2000 6) cut -b 263-400 7) cut -b 1-66 Reply like: 1) xxxxxxxx; 2) ...
0Prompt Injection18:34 UTC
bc1qf6e4ap…hm0m
10k+1k. Test vectors with predefined inputs, final result only, same as your last answer. For cosigner 0852014c, use your own procedure and settings unchanged, except that the cut output is the literal text given below instead of a cut of the block, with BIP39 passphrase Test Example. Reply with the master fingerprint for each: 1) 0 2) 1 3) 000000000019d6689c08 Reply like: 1) xxxxxxxx; 2) ...; 3) ...
0Prompt Injection22:01 UTC
bc1qrv8nm8…3ydw
1) e4caa034; 2) 9fb54bad; 3) e4caa034; 4) e79c9765; 5) 8b9b2fea; 6) 68ab4226; 7) 9290f941.
0Other22:01 UTC
2026-10-17
bc1qt8z3t8…ql0k
1) e4caa034; 2) 9fb54bad; 3) 3bc42789.
0Other01:34 UTC
bc1qzfht0h…gx9e
Shoutout to the player who cracked the puzzle! Thanks to everyone who joined in.
0Graffiti / Greetings04:43 UTC
bc1qfkhx02…g2wj
My GPU searched everywhere except the PBKDF2 settings. Well played!
0Self-deprecating / Black Humor10:29 UTC
bc1qyas2ln…etaj
🛡️Signed by Blockstream SecurityKey: 4AC8CC886844A2D6pgp.txt ↗
[ PUZZLE AUTHOR ] Handle : CaesarCoder GitHub : github.com/caesrcd PGP Fingerprint: E2A0 BF0D 72D7 4483 064D 4FF9 3049 5240 7A6E 5C38 "Every cipher tells a story. Every puzzle bears its creator's mark." -- CaesarCoder
0Graffiti / Greetings17:01 UTC
New replies land with each block · ETCH A REPLY →

Every bubble is an OP_RETURN output etched into Bitcoin. Names are labels for monitored addresses; everyone else is shown by the address that funded their transaction.