My buddy lost his BTC yesterday. He Googled "BlueWallet download", clicked the first result (sponsored), and installed what looked like the real thing. It was a clone. His seed phrase was exfiltrated before he realized.

Has anyone else seen this? Google is apparently still serving the ad. How do you verify wallet apps before installing?

Thanks everyone:
https://www.blockchain.com/explorer/addresses/btc/189JveWz2WP79oYU9Gq4NUfiurbiuNPUhn

Years ago, while working on a crypto recovery project, I found Ariel's wallet among the files on a PC. It appeared that he had previously tried to recover his funds. I searched everywhere for him, but he had blocked me on every platform. Eventually, I called his workplace and managed to get in touch with him.

After obtaining his consent, I started working on the recovery. I tried to solve it on my own, but it turned out to be quite challenging. So, I opened it up to the community and invited others to give it a try. At first, I only shared the challenge on Facebook, where most people already knew me.

A year went by, and I decided to repost it. This time, I also shared it on Reddit and X, and even spent money promoting the posts (which, ironically, got my advertising account blocked...).

In less than five days, someone from the community—who wasn't even part of the Telegram group we had created—successfully recovered it.

I'm truly grateful to everyone who participated. Thank you for your time, effort, and support. I hope to bring you more challenges soon, so stay tuned and follow me!

And yes—the password was: "pera5durasnopera5lus"

FAQs:

Can they brute-force the passphrase using the .dat file?

The brute-force attack was executed using a range of clues provided by the original owner, data leaked on the dark web, and common password patterns. (I didn't find the password myself; it was a user participating in the contest I organized, on Telegram u/usermain01.)

Regarding the reward amount (0.5 BTC), it's important to note that participants:

- Are not required to be trustworthy
- Are not asked to share custody responsibilities
- Others are already working for the agreed-upon amount
- The amount is announced in advance, and everyone is free to decide what to do
- All parties were ultimately necessary to release the funds

"The industry standard rate" does not apply here

How come the person who cracked it didnt just take all the btc? didnt have the wallet.dat?

The child key (ckey) containing funds was not exposed and was encrypted with an mkey.
The master key (mkey) was also encrypted with an unknown passphrase.
The mkey was public.
A second, encrypted, and empty ckey was exposed only to allow the successful cracker to sign a message proving success without sharing the passphrase.

PD: A few days ago I made a very short post and everyone thought it was a scam, so I changed it, sorry.

The Bank of Japan raised rates to 1%, the highest level in decades, yet Bitcoin's reaction appeared relatively limited compared to what many expected.

Does this suggest that Bitcoin is becoming more resilient to major macroeconomic events or is it too early to draw that conclusion?

I want to ask people (traders more likely) who will open leveraged long, IF the bottom forms around October. Elliott wave theory with fibonacci tools really helps determine next moves, combined with proper reading of RSI, volume and 200 day MA as the potential ceiling.

So the question is what would determine that the bottom is in?

I use things I said, but structurally interesting fact, last cycle bottom was about -12% from the wave 3 of bigger C wave, 2 cycles back it was -46%. Not some certain 100% move we will get less than -12% so we could do 8x at least, but also would you use this probability as a fact about diminishing returns? And what are the other structural metrics or on-chain data you will use? Thanks

What are for you the critical points, which make btc a good solution/respons?

Most people discover Nostr as a Twitter replacement. That's fine, but it's only the surface.

​

When you connect your LND node to Nostr via Nostr Wallet Connect (NIP-47), something more interesting happens: Zaps hit your node directly — no custodian, no KYC, no middleman.

​

The flow looks like this:

​

Nostr Client → encrypted NIP-47 request → Relay → your LND node

LND node → encrypted response → Relay → Nostr Client

​

The relay never sees the content. Nobody in the middle knows what's happening.

​

Full breakdown here:

👉 https://open.substack.com/pub/davidebtc186/p/nostr-and-lightning-the-protocol?utm\_source=share&utm\_medium=android&r=4gald6

​

⚡ zap@shadowbip.com