Search key, WIF, mnemonic across 18 chains CtrlK

Affine Nonces Check

Paste a Bitcoin address (or a transaction ID) to extract each input's ECDSA signature components — R, S, Z — then test each signing key for two signatures whose nonces are related by an affine equation k2 = a·k1 + b. When such a pair exists, the private key is recovered by solving the two signature equations and verified against the on-chain public key. Everything runs in your browser.

bitcoin
Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.
newest for the address (exactly this many are scanned; a single TXID fetches just that one transaction)
Affine relation k2 = a·k1 + b (mod n):
Balance 0 BTC
Received 0 BTC
TX 0 
Instructions:
1. Enter a Bitcoin address (recommended) or a 64-character TXID.
2. Signatures are grouped by public key, then each key's signature pairs are tested for two nonces related by an affine equation (k2 = a·k1 + b).
3. A private key is shown only when it regenerates the on-chain public key, so there are no false positives. Recovery needs at least two signatures from the same key.
4. An internet connection is required to fetch transaction data from public block explorers.
Educational / read-only tool. Transaction data is fetched live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback). Key recovery only succeeds on wallets whose signer reused nonces in an affine relation (k2 = a·k1 + b) on-chain — it demonstrates why related or linearly-dependent ECDSA nonces are catastrophic. Every result is verified against the on-chain public key; nothing is guessed. Never enter keys for wallets you use.