hashpwn

Terms of Service & Privacy Policy Effective Date: Aug 31, 2025 Welcome to hashpwn.net (“we,” “our,” or “us”). By accessing or using hashpwn.net or any of its subdomains (collectively, the “Services”), you agree to comply with and be bound by these Terms of Service. This includes, but is not limited to, the forum and any Services we may provide under the hashpwn.net domain. If you do not agree, please discontinue use of the Services. 1. Eligibility You must be at least 18 years old to register for or use any hashpwn.net Services. By using our Services, you represent that you meet this requirement. 2. User Conduct When using any hashpwn.net Service, you agree not to: Post, share, or request personally identifiable information (PII). Share, request, or distribute illegally obtained data (e.g., combo lists, stolen data, etc). Engage in hate speech, harassment, or unlawful activities. Attempt to compromise, disrupt, or misuse any Service we provide. Post, share, request, or link to any sexually explicit, pornographic, or sexually suggestive content. Our Services are intended for ethical cybersecurity research, discussion, and learning. Illegal activity is strictly prohibited. 3. User Content You retain ownership of any content you post, upload, or submit to hashpwn.net Services. By submitting content, you grant hashpwn.net a non-exclusive, worldwide license to store, display, and distribute your content as necessary to operate and provide the Services. Requests for deletion of publicly posted content will be honored, except in rare cases where retention is required for legal, security, moderation, or administrative reasons (e.g., evidence of abuse). Account deletion and personal data removal requests will always be honored. 4. Privacy & Data Collection We respect your privacy. We collect basic technical information such as IP address, cookies, browser type, and usage analytics. We use this information only for site functionality, security, and moderation. We may log usage data to maintain service quality. We do not sell, rent, or share your information with third parties for advertising or marketing purposes. Users may request removal of their personal data. 5. Disclaimer of Warranties All Services provided by hashpwn.net are offered “as is” and without warranties of any kind, whether express or implied. We do not guarantee uptime, availability, or error-free operation for any Service. Use of hashpwn.net Services is at your own risk. 6. Limitation of Liability To the fullest extent permitted by law, hashpwn.net, its owners, administrators, moderators, and affiliates are not liable for any damages arising from use of our Services, including but not limited to loss of data, downtime, security issues, or service interruptions. 7. Termination We reserve the right to suspend, restrict, or terminate accounts or access to any hashpwn.net Service at our discretion for violations of these Terms or other reasons deemed necessary to protect the community and infrastructure. 8. Changes to the Terms We may update these Terms at any time. Changes will be posted on this page with a new effective date. Continued use of our Services after updates are posted constitutes acceptance of the revised Terms. 9. Contact For questions, concerns, or requests, please contact: @cyclone (Admin/Owner)

md5crypt.left.txt md5crypt.found.txt

Hacked Ledger Nano X Wallets Steal Seed Phrases Via SPI Bus [image: 1791821418903-55a8f487-0c2f-4cca-8e7f-2a35fef9b782-image.jpeg] Security researchers have uncovered modified Ledger Nano X hardware wallets being sold that contain hidden cellular implants designed to steal user's 24-word recovery phrases. Unlike traditional attacks targeting firmware or private keys, this attack intercepts the unencrypted SPI communication between the Ledger's secure element and OLED display. A hidden microcontroller monitors the display traffic, reconstructs recovery words from the transmitted pixels, and sends the stolen phrase to the attacker using a built-in LTE modem and eSIM. [image: 1791821122776-9e6b3e40-eb02-4f44-9f42-39bfa2769e90-image.jpeg] The secure element itself is never compromised. Because the underlying Ledger hardware remains genuine, the device can still pass Ledger Live's authenticity checks while silently exposing the recovery phrase. Hardware hacker Joe Grand first reverse engineered one of these implants, presenting his findings at hardwear.io USA in May 2026. In September 2026, Tibane Labs examined two newer generations of the implant, showing how the attack has evolved from hand-soldered wires into sophisticated, purpose-built hardware. The latest version uses a black-coated flexible PCB concealed beneath the OLED, a Nordic nRF9151 cellular module, an eSIM, and a custom antenna. The original battery remains untouched, and component markings have been deliberately removed to make identification more difficult. The increasingly sophisticated designs suggest these implants are being developed for repeatable, potentially large-scale deployment rather than isolated experiments. Separately, Ledger is investigating reports of cryptocurrency theft involving CryptoBilis, an authorized reseller operating in Southeast Asia. On-chain investigator Specter estimates that more than $86 million in Bitcoin, Ethereum, and Tron may have been stolen. Ledger has not confirmed those losses. Ledger has asked CryptoBilis to suspend sales and shipments while the investigation continues. Importantly, researchers have not established a direct connection between the hardware implants and the reported CryptoBilis thefts. Ledger has not confirmed the cause of the losses. Ledger advises customers who purchased devices from CryptoBilis within the past 90 days not to initialize them. Customers who have already used these devices should consider transferring their assets to a trusted wallet with a newly generated recovery phrase. Sources: Tibane Labs: Ledger Nano X: The Spy Implant https://www.tibane.net/research/ledger-nano-x-implant Grand Idea Studio: Reverse Engineering a Ledger Nano X Hardware Implant https://grandideastudio.com/portfolio/security/ledger-hardware-implant/ Ledger Support: Official CryptoBilis Investigation Statement https://x.com/Ledger_Support/status/2108551100613714002 The Block: Ledger Investigates Wallet Drains, Estimated Losses Exceed $86 Million https://www.theblock.co/news/business/2026-10-09-ledger-cryptobilis-fund-losses-418163

Improvement introducing batched, precise re-evaluation of candidates in the CELF algorithm By using a profiler and implementing optimizations during the initial candidate-counting stage of the CELF+heap process, we have managed to accelerate this stage of rulest by ~38%. Selection (CELF greedy) 13:13 33.6% (620.5 candidates/s) score calls=533,785 (batched=64,128, singleton=469,657), candidates=2,759,654; wall time=471.294 s; host allocation=2.361 s; host enqueueing=81.524 s; GPU kernel=293.786 s; H2D=0.516 s; filling=7.462 s; readback=2.024 s; wait for synchronization=315.712 s; average time per call=0.88 ms Selection (CELF greedy) 08:11 24.0% (1,006.0 candidates/s) score calls=525,423 (batched=88,982, singleton=436,441), candidates=2,833,397; wall time=409.614 s; host allocation=1.458 s; host enqueueing=74.758 s; GPU kernel=303.370 s; H2D=0.502 s; filling=6.669 s; readback=1.039s; synchronization wait=311.601s; avg wall/call=0.78ms Time saved: 5.02 min Reduction in stage duration: 38.23% What has changed The CELF algorithm continues to use simplified upper bounds (based on raw hits) to discard candidates. Candidates whose refined upper bounds still allow for a result better than the current best are now evaluated precisely and in batches - using a dedicated bitmap row of target IDs for each candidate. For the winning candidate, an additional registration scan is performed to retrieve the exact target IDs. The gain obtained this way is verified against the precise gain calculated during the batch process before the coverage state is committed. The OpenCL compute kernel supports three modes: fast upper-bound estimation, batch calculation of precise gains, and precise evaluation of a single candidate, including hit registration for the winner. The ProcessEngineProxy component issues the command to use this new precise-counting mode, while maintaining the CELF algorithm's execution on the previously selected single GPU. The method for allocating the coverage matrix remains unchanged: the full "candidate–target" coverage matrix is ​​not created. Ability to roll back changes (rollback) Batch-based, precise re-evaluation of candidates is enabled now by default. To use the legacy CELF-style re-evaluation (rescore) path, you must set this environment variable before running the program. RULEST_CELF_EXACT_BATCH=0 Please be aware, however, that for a period of 2–5 minutes, the rule processing rate will start/drop to 0 rules per second (depending on the heap load - specifically, how many "dead" candidates with inflated upper bounds caused by duplicates - reside at the top of the heap, ahead of the winning rule).

Escrow ID# 93967 • Algorithm: md5($plaintext.$salt), -m 10 • Total hashes: 170656 • Price per hash: $0.0010 • Escrow URL: https://hashes.com/en/escrow/item/?id=93967 • Download hashes: 93967_10.zip

Note to all new accounts: Upon creating a new account at forum.hashpwn.net, as soon as your account is verified, you will be sent a welcome DM with instructions on reading and agreeing to follow the forum rules. You must react to that DM within 48 hours of receiving it to acknowledge that you have read and agree to follow the forum rules. Failure to do so will result in your new account being banned. Example DM: Welcome to hashpwn! Make sure to read through the forum rules here: https://forum.hashpwn.net/post/31 Once you've read through the rules, react to this message within 48 hours to verify that you agree to follow all forum rules. Failure to do so will result in your account being banned.