solflare_pwn - Solflare Vault Extractor & Decryptor

[oe3p32wedw]

Very interesting. Is the encryption algorithm the same as the old phantom wallet?

[cyclone]

@oe3p32wedw Both use nacl/secretbox encryption with a pbkdf2-sha256 KDF, but with a few nuances such as encoding and iterations.

[rickyc2024]

Proud to have worked with @cyclone on this, we will not be revealing exactly how it works for now.

[cyclone]

Thanks, @rickyc2024, for bringing this wallet to my attention. It was a lot of fun working through it, and congrats for also figuring this one out and writing your own tooling for extracting / decrypting the wallet.

There's also a hidden "easter egg" that has been reported to Solflare that both rickyc2024 and I independently discovered.

Concerning the solflare_pwn toolset. To clarify, it is solely my work, built from my own work with reverse engineering, cryptography and software development. There are zero lines of code in the toolset that came, or were influenced by, any other source.

[secretscribe1]

hi! @cyclone WIll you gonna upload solflare solution? https://github.com/cyclone-github/solflare_pwn

[cyclone]

@secretscribe1 solflare_extractor tool has been released on GitHub. DM me if you need help recovering a Solflare wallet.
https://github.com/cyclone-github/solflare_pwn/releases

[cyclone]

FYI
Solflare Crypto Wallet Vulnerability - xpass exploit
https://forum.hashpwn.net/post/416

[cyclone]

New GitHub Release:
Solflare Wallet Extractor and Decryptor compiled binaries have both been posted on GitHub.

Note, I am not publicly releasing the xpass exploit logic with the decryptor. If you have forgotten your Solflare password and cannot recover it with the decryptor on GitHub, send me a DM.

Solflare Vault Extractor v0.1.0:
Solflare Vault Decryptor v0.1.1:
https://github.com/cyclone-github/solflare_pwn/releases

[pirozhok]

@cyclone Hi cyclone, could you help me in decrypting the wallet, I don't understand how to open the code from github

[cyclone]

@pirozhok You'll need to run the extractor and decryptor from terminal since they are CLI tools. This is similar to how you would run most hash cracking tools such as hashcat, mdxfind, john, etc.

There are usage examples on the OP above and GitHub readme. Before tackling your own Solflare wallet, try recovering the password and seed phrase from the test hash.
https://forum.hashpwn.net/post/404

[Senses]

Hi, Cyclone. Can you tell me how to run in mode: xpass exploit?

[cyclone]

@Senses DM me on Matrix.