Reused R Bitcoin
Pricing
from $1,000.00 / 1,000 results
Go to Apify Store
Reused R Bitcoin
Detection & research tools for repeated ECDSA & Schnorr nonces (r) in Bitcoin transactions
Pricing
from $1,000.00 / 1,000 results
Rating
0.0
(0)
Developer
Abdo Abdo
Maintained by Community
Actor stats
0
Bookmarked
2
Total users
1
Monthly active users
2 days ago
Last modified
Categories
Share
reused-r-bitcoin
Detection & research tools for repeated ECDSA & Schnorr nonces (r) in Bitcoin transactions
⚠️ important :
these tools are for educational purposes. Any incorrect or harmful use is the responsibility of the user.
What is “r-repeat” :
r-repeat means the same ECDSA or Schnorr nonce (k) — and thus the same r value — was used more than once with the same private key in Bitcoin signatures. If that happens, the signatures leak enough information that someone could recover the private key. This turns otherwise secure signatures into a critical vulnerability.
How does r repeat? :
-
Weak or insufficient randomness (CSPRNG): the system or device didn’t provide enough entropy when signing.
-
Programming bug: the random generator is re-seeded incorrectly or the same nonce buffer is reused.
-
Incorrect deterministic nonce implementation: RFC6979 is safe when implemented correctly; buggy implementations break safety.
-
Re-using the same private key across apps / chains: one weak environment can compromise all signatures made with that key.
-
Weak key-generation (brainwallets): low-entropy passphrases or predictable key derivation lead to weak keys and weak nonces.
-
Hardware / firmware faults: buggy devices can unintentionally reuse nonces (e.g., after power loss).
Why is this dangerous :
Because the nonce k is the core secret that makes each signature unique. If the same k is used twice with the same private key, the signatures alone (no access to the private key required) may allow an attacker to compute the private key. In short: nonce reuse breaks the security goal of signatures.
What you should do (safety tips) :
- Use well-audited libraries (e.g., secp256k1/OpenSSL) and keep them updated.
- Prefer RFC6979 deterministic signing only via proven implementations.
- Use hardware wallets or HSMs with good security reviews for high-value keys.
- Never reuse a private key across unrelated apps/chains.
- Avoid brainwallets or passwords-as-keys; use proper key generation.
- Monitor signatures: detect repeated r values and act immediately if found.
Requirements :
Python 3.10 or newer
Sufficient free storage space to download transaction data (depends on analysis size)
Internet connection when fetching blockchain data or using APIs
Security Notice :
These tools are designed purely for analysis and research — they do not collect any user data, results, or personal information in any form.
Running the tools with an internet connection is safe, as long as you trust the source.
You can always review the source code yourself to verify what each tool does and ensure it meets your security standards.
Required Python Packages :
The scripts require the following Python libraries:
• requests
• tqdm
• ecdsa
How to operate tools + example :
This is a list of addresses that included the r-duplication vulnerability :
If you want to check the balances of these addresses, use this script.
usage :
You need to create a file and put addresses in it, for example(adds.txt)
If you have a large number of addresses, you can split the file using this script.
usage :
You can change the number of split lines(200) as you want
anyway, Let's choose this address
1• collecting transactions
Raw transactions containing values and signatures
This script collects raw transactions from a target address.
usage :
rawtxs.txt is file that contains raw transactions is automatically generated by script
fetch_state.json is state file automatically generated by script
You can use command (--resume --append) To continue collecting transactions where left off
This script like the first one, but with advanced options.
For example, we have this address
This address has over 52,000 transactions, and that's a large number, Let's say you only want the 100 oldest transactions
First, you will enter this explorer
This explorer allows you to browse all transactions, even if there are many, without loading each transaction into a very long sequence.
Each page contains 25 transactions, You will go to the last page, for example, page 2096
Then calculate the number of transactions you want to collect. For example
100÷25=4
1000÷25=40
10000÷25=400
Then subtract a number of pages from the total number.
2096-40=2056
usage :
(--resume --append) command to continue collecting
2• analyze
Analyzing transactions to extract values used to calculate private key
This is script that analyzes
usage :
This script will generate file named "der_full_summary.csv" containing values.
The file size can be so large that it is unreadable (file size depends on the analysis; for example, analyzing many transactions, such as 10,000 transactions, might produce a file size of 10+ GB).
You can use this script
This script should be in the same folder as the csv file.
script will read csv file and extract all the lines in which "r" is repeated.
usage :
Then you can change csv file name to "der_full_summary.csv" to continue working
This script calculates z value
usage :
The script will create a file named "der_with_z.csv". This file is required to calculate the private key.
Additions :
This script similar to analysis script, but with additional features such as sorting signatures according to protocol.
usage :
This script extracts additional information for Schnorr Protocol
usage :
3• computing private key
We will use "der_with_z.csv" file generated by command
because it contains all the values required to calculate the private key.
Required values :
repeated r value (r_hex In CSV file)
s value for each signature (s_hex In CSV file) (We need the value of the first and second signatures. If there are more than two signatures, you can switch between them)
z value for each signature (z_mod_n In CSV file) (Value of the first and second signatures)
The values must be integers.
z values (z_mod_n) is already integer
You must convert (r-s1-s2) values from Hex to an integer
You can use this script
Create file named "hex.txt" and Write values in it, One line for each value
script will convert values and write them to new file.
usage :
for example (1HXSnvNGK8oYQCyLDkpHNZ2sWPvFsYQcFU)
When analyzing the transactions of this address, we will find four instances (four signatures) of r repetition (one r value - four s value - four z value)
We will use values from the first and second signatures :
repeated r: hex(00cabc3692f1f7ba75a8572dc5d270b35bcc00650534f6e5ecd6338e55355454d5) int(91699739317935258627372771550459504326006289891191381848862551863464593478869)
s1: hex(00f65bfc44435a91814c142a3b8ee288a9183e6a3f012b84545d1fe334ccfac25e) int(111431484914827310314108809136597661506085346855505784425577929088113412063838)
s2: hex(00b584c5e2f26eaac9510307f466d13f8d4e8f57b1323cc4151ff6ffeb6747ca9b) int(82103215168631327946455936234377737221280608082064931975396899914217832303259)
z1: int(70121596733354710270739379126478863332897631323035990573894949033544740983882)
z2: int(42691526897907875236967398205101700537962275948723679969547592971981809076177)
This script calculates the private key.
Before running it, you must open it with a text editor and change the values (r-s1-s2-z1-z2) (Do not change n value) (values must be integers)
usage :
script will print the results
for example:
x (hex) is the private key
To convert x(hex) to WIF, use this script.
Create file named "xhex.txt" and place it in the same folder, then write x(hex) values in it
script will read file and produce WIF (compressed / uncompressed) With all possibilities with derivatives for each type of address(p2pkh / p2sh / p2wpkh / p2tr), along with a balance check.
usage :
file named "mywifs.csv" will be produced containing the results.
for example:
This is WIF(uncompressed - p2pkh)to 1HXSnvNGK8oYQCyLDkpHNZ2sWPvFsYQcFU
Additions :
This script calculates private key for the schnorr protocol.
usage :
Change the values
It will print the results
For example :
Support the Project :
If you find this project useful or it helped you in any way, consider supporting me!
Donate :
BTC
