Search key, WIF, mnemonic across 18 chains CtrlK

SignMessage Nonce Reuse

Enter a Bitcoin address (or a transaction id) to fetch every ECDSA signature and extract its r, s and z. If any two signatures reuse the same nonce (same r) the private key is recovered instantly.

Enter a Bitcoin address (all its transactions are scanned) or a 64-character transaction id. Every input's r, s and z is extracted automatically; a reused nonce (same r) reveals the private key.

Transactions to fetch: newest for the address — a single TXID fetches just that one transaction.

Balance0 BTC

Received0 BTC

TX0

Advanced — also paste signed messages / raw signatures

One per line: message | base64signature, or z=… r=… s=… for a tx input (merged with the scan above)

Instructions:
1. Enter a Bitcoin address (all its signatures are scanned) or a 64-character transaction id.
2. Every input's r, s and z is extracted automatically from live transaction data.
3. If any two signatures reuse the same r (nonce reuse) with different s, the private key is recovered.
4. An internet connection is required to fetch transaction data from public block explorers.

Educational tool — runs 100% in your browser. A Bitcoin signed message (BIP137) is an ECDSA signature over dSHA256("Bitcoin Signed Message:\n" + msg); the 65-byte signature lets anyone recover the signer's address. If a wallet ever reuses the nonce k, two signatures share the same r and the private key falls out via k = (z1−z2)/(s1−s2). Only analyze signatures you are authorized to test.