Log inSign up
Coinspect Security
2,246 posts
Coinspect Security profile banner
@coinspect

Coinspect Security

@coinspect
You Build. We Defend. Since 2014 protecting critical decentralized systems: L1 nodes, smart contracts audits, wallets, web3 dApps, exchanges, bridges.
coinspect.com
Joined July 2014
797
Following
3,196
Followers
RepliesRepliesRepostsRepostsMediaMediaArticlesArticles

Log in or sign up for X

See what’s happening and join the conversation

Continue with phone
or
Log in with username or email
Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
  • @coinspect
    Coinspect Security
    @coinspect
    Sep 3
    current Unlukey dataset
    Image
    @LLFOURN
    Zero-Knowledge Goof❄️
    @LLFOURN
    Sep 3
    Dumping all my coldcard attack research before it gets lost. A few weeks a go I reproduced the attack to mark all the wallets to find. The stats at the time of the attack: 1. vulnerable wallet seeds: 1,329 (1,416 peak) 2. vulnerable bitcoin: 2045 ₿ (2,525 peak) 3. largest
  • @coinspect
    Coinspect Security
    @coinspect
    Aug 26
    One important goal of Unlukey is giving answers to people affected by unexplained wallet drains. Often, the root cause is never identified and user error is the default explanation. By reproducing weak seed flaws, we can help explain what happened in some of those cases.
    @coinspect
    Coinspect Security
    @coinspect
    Aug 22
    There are still people using mnemonics generated by old wallet versions affected by weak randomness. How they ended up carrying those seeds forward is not clear. What is clear: upgrading the wallet does not upgrade the seed. That's why we need Unlukey. unlukey.org
  • @coinspect
    Coinspect Security
    @coinspect
    Aug 22
    There are still people using mnemonics generated by old wallet versions affected by weak randomness. How they ended up carrying those seeds forward is not clear. What is clear: upgrading the wallet does not upgrade the seed. That's why we need Unlukey.
    Image
    Unlukey
    From unlukey.org
  • @coinspect
    Coinspect Security
    @coinspect
    Aug 21
    Unlukey is basically "Have I Been Pwned" for crypto wallets. Paste any blockchain address → instantly see if it was generated from a weak seed that attackers can brute-force. Your addresses never leave your device. Check yours👇
    Image
    00:00
    Made with AI
    1
  • @coinspect
    Coinspect Security
    @coinspect
    Aug 21
    Unlukey currently checks addresses with on-chain activity from recovered weak seeds. Our goal is to reproduce exploited weak PRNGs and likely unexploited variants, and cover each PRNG’s full vulnerable seed space. We’re looking for researchers and wallet teams to collaborate!
    @coinspect
    Coinspect Security
    @coinspect
    Aug 20
    Today we’re releasing Unlukey🎲 a free, public tool to identify wallet addresses generated from weak seed phrases. The goal is simple: help users detect vulnerable wallets before attackers do. 🧵
    2
Advertisement
Advertisement