hashpwn

found_11660.txt left_375722.txt

found_51.txt left_2229.txt

Congrats to Team HashMob for winning 1st in Pro, CsP in 2nd, and hashcat in 3rd. Congrats to UNSHADE winning 1st in Street, Irreverent_Lemur in 2nd, and iceberg10 in 3rd. [image: 1786302483846-173de03f-00f1-48e4-8076-320c999a98f6-image-resized.jpeg] Pro Team Graph: [image: 1786302558486-7acdb240-4c50-4609-bb3b-679d2eb529ea-image-resized.jpeg] Street Team Graph: [image: 1786302593516-db0886ec-4153-451a-83f1-92703b6fb9c9-image-resized.jpeg]

Found 1,260 Left 170,191 1260_found_HashPwn.txt 170191_left_HashPwn.txt

mode 0 found_3324.txt left_674756.txt

COLDCARD RNG Flaw Linked to $88.6M Bitcoin Theft A firmware bug in COLDCARD hardware wallets allowed attackers to recover wallet seeds and steal an estimated 1,367 BTC, worth about $88.6 million, from 4,585 Bitcoin addresses. [image: 1785771133334-81cb70b0-b828-4d30-8b10-81698e0e963c-image.jpeg] Affected COLDCARD firmware was supposed to use the STM32 hardware RNG (Random Number Generator) when creating wallet seeds. Instead, an integration error caused it to fall back to MicroPython’s deterministic Yasmarang pseudorandom number generator. The fallback was seeded using values such as: Device identifiers System timing data Real-time clock values Previous RNG state These values are not secure sources of cryptographic randomness. An attacker could generate possible wallet seeds offline, derive the related Bitcoin addresses, and compare them against funded addresses on the public blockchain. Once a match was found, the attacker could derive the private keys and move the funds. The transaction pattern supports the theory of an automated attack. Many wallets were swept using the same unusually high fee rate, with no change outputs. The flaw affected several COLDCARD models and firmware versions, including older Mk2 and Mk3 devices and some Mk4, Mk5, and Q firmware releases. Fixed firmware is now available, but updating alone does not protect a seed that was generated by vulnerable firmware. Affected users should: Install the fixed firmware Generate a new seed Verify the new wallet address Move funds to the new wallet Sources: Block Bitcoin Engineering: Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware Coinkite: COLDCARD Security Advisory https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/ BleepingComputer: COLDCARD Wallet RNG Flaw Likely Linked to $88 Million Bitcoin Theft https://www.bleepingcomputer.com/news/security/coldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft/ Galaxy Research: Initial On-Chain Analysis of the Wallet Sweeps https://x.com/glxyresearch/status/2083181683067506899

@tuman has been temp banned (7 days) for hijacking other user's threads 3x times after being warned to stop. Read the rules, or get banned. https://forum.hashpwn.net/post/31

@tuman This is your 2nd time to hijack this thread. You've been warned twice in a DM, and now on this topic. Read and observe the Forum Rules or your account will be banned. Forum Rules: https://forum.hashpwn.net/post/31

v0.5.3; 2026-07-25 https://github.com/cyclone-github/pcfg-go/releases/tag/v0.5.3 pcfg_guesser ~2× faster than v0.5.2 ~2,578% faster than Python3 pcfg_guesser.py Reduce long-run RAM growth in pcfg_guesser (priority-queue frontier) Compact parse-tree representation (interned type IDs, packed nodes, arena reuse) Contiguous index-based heap (fewer per-item allocations) Reuse OMEN optimizer cache per worker Prefer []byte guess building to cut string churn Same generation logic; parallel stdout interleaving may differ across runs Rename trainer to pcfg_trainer

Hi @cyclone bro. how are you doing? Thanks for sharing too. Btw how can I get 26650 kernel? Could you help me?

60 found_0.txt 122 left_0.txt left_0.txt found_0.txt

Scheduled Host Maintenance Our host will be performing scheduled maintenance that requires a reboot of the VPS hosting hashpwn. During this maintenance, the forum and related hashpwn services will go offline temporarily. Expected downtime is less than 30 minutes, although we have not been given an exact ETA for when the reboot will occur. This notice is just to give everyone a heads up.

Need to find key-space used to crack, unless it was changed from default. Found below online image of the back, but unsure: https://sincereonetech.com/wp-content/uploads/2024/04/[email protected]

New update V-1.0.10 -Added linux and mac support -Made some improvements in handling mask asset in session history -Created a pebble client for having a dashboard on wrist for people using pebble time 2

The new HashcrackMoby 2026 event starts today at 7:00PM and will last until 15/6/2026, 7:00:00 PM, organized by Hashmob and Hashcracky. Hashcracky and HashMob teamed up to provide a new challenge for the community. By mixing our ideas like mashed potatoes, we have come up with a horrible hodgepodge of hashes primed for the cracking. It has a little bit of everything: tulips, windmills, vodka, monster balls, and more! Game link: https://hashcracky.com/game/f3619916-569f-4150-b1db-f3148aef458d

Full write up: https://forum.hashpwn.net/post/13339

Spider v1.0.0 released. https://github.com/cyclone-github/spider/releases/tag/v1.0.0 v1.0.0 by @cyclone-github in https://github.com/cyclone-github/spider/pull/15 chore(deps): bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 in the minor-and-patch group by @dependabot[bot] in https://github.com/cyclone-github/spider/pull/14 added flag "-text-match" to filter page text matches memory and performance optimizations for -file and -url modes -file mode streams wordlists from disk instead of loading entire files into RAM reduced RAM usage for large -sort wordlists default -timeout increased from 1 to 10 seconds progress bars, stats, and errors now write to stderr sanitize url fragments for dedup and extension checks updated default User-Agent Full Changelog: https://github.com/cyclone-github/spider/compare/v0.9.1...v1.0.0