TXID → R, S, Z, Address + Private Key Recovery

Paste a Bitcoin transaction ID (or an address) to extract each input's ECDSA signature components — R, S, Z — and the signing address. If two inputs reuse the same R value (nonce reuse) with different S, the private key is recovered instantly. Everything runs in your browser.

bitcoin
Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.
newest for the address (exactly this many are scanned; a single TXID fetches just that one transaction)
Balance 0 BTC
Received 0 BTC
TX 0 
Instructions:
1. Enter a TXID (64 hex characters) or a Bitcoin address.
2. If two inputs share the same R value (R-reuse) with different S, the private key is recovered.
3. An internet connection is required to fetch transaction data from public block explorers.
Educational / read-only tool. Transaction data is fetched live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback). R-reuse recovery only succeeds on wallets that already leaked their key on-chain through a faulty signer — it demonstrates why ECDSA nonce reuse is catastrophic. Never enter keys for wallets you use.