Man Forgets Password, White Hat Hacker Helps Recover $3 Million in Bitcoin from 11-Year-Old Wallet
Imagine losing your crypto wallet password in 2013 and watching Bitcoin scale new heights. However, this story recently got its happy ending as electrical engineer Joe Grand cracked the forgotten password to recover the 43.6 long-lost Bitcoin. Michael, the owner of the lost treasure, got his hands back on crypto worth about $3 million after forgetting the password 11 years ago. Grand shared the story on his popular YouTube channel.
How Was the Wallet Lost?
At a time when crypto was in its nascent stages, Michael managed to get his hands on some Bitcoin. In a bid to protect it with all his might, he turned to RoboForm, a password manager which creates unique random passwords that are encrypted using TrueCrypt.
🚨 Is your business ready for the challenges of hybrid work? Explore key cybersecurity risks and solutions in our latest blog post. Learn about safeguarding your company with robust password management and cutting-edge security practices. Dive in now! 🔒 https://t.co/tPKGkQmBiB
— RoboForm Password Manager (@roboform) May 3, 2024
Unfortunately, the encrypted password file got corrupted, and there was no backup. Michael didn’t store the password in RoboForm as he was afraid it could be hacked or stolen. However, as time went on, Michael completely forgot his password. The only detail he remembered was that it was a 20-character password with uppercase and lowercase letters, numbers, and special characters.
“At this time I was like okay crap a couple of thousand euros which was painful but okay,” Michael said in the video. He then saw the price of the Bitcoin rally and realized that his wallet was going for a multimillion evaluation with 41.6 Bitcoin.
Bitcoin price rises and volumes surge as long-awaited ETFs debut https://t.co/8xnBQp6jNz
— Financial Times (@FT) January 11, 2024
Here’s How An 11-Year-Old Forgotten Password Was Cracked
In 2022, Michael came across a story, where Grand helped a crypto owner recover access to over $2 million in cryptocurrency. He got his hopes up and contacted the hacker for help.
Grand is an electrical engineer who started working with hardware at age 10. In 2008, he appeared as a co-host on Discovery Channel’s “Prototype This!” show. He now works as a security consultant for companies that build complex digital systems and helps them understand how hardware hackers work.
According to Kim Zetter for Wired, Grand initially turned down Michael as his main job involved hardware and Michael had used a software crypto wallet.
Michael approached Grand again a year later. This time, the electrical engineer decided to give it a shot. He soon started working on it along with a German colleague Bruno.
After months of hard work, the hackers reverse-engineered the old version of the RoboForm software. They then discovered a security flaw in the application and learned that the passwords generated by it weren’t that random after all. They found that the passwords were tied to the date and time they were generated. However, Michael did not remember that either.
All they had was the year, 2013, when the password was generated. Grand then turned to a tool that is used by the US National Security Agency to disassemble the password generator’s code. The hacker tricked the system by changing the time back to 2013.
This was a super fun project and a reminder about the lasting effects of security problems long after they're patched. https://t.co/GLhXMWRDSn
— Joe Grand (@joegrand) May 28, 2024
Joe and Bruno worked together to generate millions of potential passwords, and after a few failed attempts, they finally recreated Michael’s password.