Search key, WIF, mnemonic across 18 chains
CtrlK
RSZ Vulnerable Addresses
Bitcoin addresses exposed by ECDSA nonce (R-value) reuse
Address
Balance
Vulnerability What is RSZ / Nonce Reuse?
ECDSA signatures use a random nonce k. If the same k (so the same R value) signs two different messages, the private key can be recovered with simple algebra.
Why List Them?
These Bitcoin addresses signed transactions that share an R value on-chain, leaving them mathematically exposed. Educational / research use only.
RSZ Vulnerable Bitcoin Addresses
This page tracks Bitcoin addresses affected by ECDSA nonce reuse — often called the RSZ vulnerability after the three values (R, S, Z) used in signature analysis. When a wallet signs two different transactions with the same random nonce k, both signatures share the same R value on the blockchain, and the private key can then be solved directly.
How the R-value leak works
An ECDSA signature is a pair (r, s): r is derived from the nonce k, and s mixes in the message hash z and the private key. Two signatures (r, s1, z1) and (r, s2, z2) that reuse the same r let anyone compute k = (z1 − z2) / (s1 − s2), and from k the private key follows immediately. This is not a weakness in Bitcoin itself but in how some wallets generated their nonces.
What this list is for
The addresses below were flagged for repeated R values in their on-chain signatures. This tracker exists for security research and education — to help wallet developers and researchers understand and detect weak-nonce signing. Balances shown are live and read-only; no private keys are derived or displayed here.
