Skip to content
  • Categories
  • Recent
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Slate)
  • No Skin
Collapse
Brand Logo

hashpwn

Home | Donate | GitHub | Matrix Chat | PrivateBin | Rules

  1. Home
  2. Hash Cracking / Recovery
  3. Crypto Currency: $bitcoin$ $metamask$ $electrum$ $ethereum$ $blockchain$, etc.
  4. Phantom Wallet Repair

Phantom Wallet Repair

Scheduled Pinned Locked Moved Crypto Currency: $bitcoin$ $metamask$ $electrum$ $ethereum$ $blockchain$, etc.
4 Posts 2 Posters 262 Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S Offline
    S Offline
    safisafo
    wrote last edited by
    #1

    Hello. So long story short, I had a bridge wallet (not important) on phantom just used for certain movements.

    This morning the extension said there was something wrong and to click on Repair and I clicked. Unluckily, it deleted everything inside, including the wallet. It does not have much but I would like to recover it, and since I just use it every here and there I did not note the seed.

    However I have a system backup from 4 days ago. I tried to simple copy-paste the backup into the phantom folder under AppData but it does not work. It asks for new wallet creation and then overrides what I just pasted. Any idea on how to import it?

    1 Reply Last reply
    0
    • cycloneC Online
      cycloneC Online
      cyclone
      Admin Trusted
      wrote last edited by
      #2

      You might try running phantom_extractor on a copy of your backup. If the vault is still there, the tool will extract and print it like the example below. To do this, you'll need to find the bfnaelmomeimhlpmgjnjophhpkkoljpa directory in your backup which is where Phantom stores the vault. A quick read through the phantom_pwn GitHub README will show you the default location of this directory.

      GitHub:
      https://github.com/cyclone-github/phantom_pwn

      Forum topic:
      https://forum.hashpwn.net/post/75

      ./phantom_extractor.bin bfnaelmomeimhlpmgjnjophhpkkoljpa/
       ----------------------------------------------------- 
      |        Cyclone's Phantom Vault Hash Extractor       |
      |        Use Phantom Vault Decryptor to decrypt       |
      |    https://github.com/cyclone-github/phantom_pwn    |
       ----------------------------------------------------- 
      {"encryptedKey":{"digest":"sha256","encrypted":"5pLvA3bCjNGYBbSjjFY3mdPknwFfp3cz9dCBv6izyyrqEhYCBkKwo3zZUzBP44KtY3","iterations":10000,"kdf":"pbkdf2","nonce":"NZT6kw5Cd5VeZu5yJGJcFcP24tnmg4xsR","salt":"A43vTZnm9c5CiQ6FLTdV9v"},"version":1}
      ...
      

      Sysadmin by day | Hacker by night | Go Dev | hashpwn
      3x RTX 4090 3x RTX 2080ti
      Forum Rules

      S 1 Reply Last reply
      0
      • S Offline
        S Offline
        safisafo
        wrote last edited by
        #3
        This post is deleted!
        1 Reply Last reply
        0
        • cycloneC cyclone

          You might try running phantom_extractor on a copy of your backup. If the vault is still there, the tool will extract and print it like the example below. To do this, you'll need to find the bfnaelmomeimhlpmgjnjophhpkkoljpa directory in your backup which is where Phantom stores the vault. A quick read through the phantom_pwn GitHub README will show you the default location of this directory.

          GitHub:
          https://github.com/cyclone-github/phantom_pwn

          Forum topic:
          https://forum.hashpwn.net/post/75

          ./phantom_extractor.bin bfnaelmomeimhlpmgjnjophhpkkoljpa/
           ----------------------------------------------------- 
          |        Cyclone's Phantom Vault Hash Extractor       |
          |        Use Phantom Vault Decryptor to decrypt       |
          |    https://github.com/cyclone-github/phantom_pwn    |
           ----------------------------------------------------- 
          {"encryptedKey":{"digest":"sha256","encrypted":"5pLvA3bCjNGYBbSjjFY3mdPknwFfp3cz9dCBv6izyyrqEhYCBkKwo3zZUzBP44KtY3","iterations":10000,"kdf":"pbkdf2","nonce":"NZT6kw5Cd5VeZu5yJGJcFcP24tnmg4xsR","salt":"A43vTZnm9c5CiQ6FLTdV9v"},"version":1}
          ...
          
          S Offline
          S Offline
          safisafo
          wrote last edited by
          #4

          @cyclone Trying to extract the vault gives me checksum mistakes with Chrome

          1 Reply Last reply
          0

          Hello! It looks like you're interested in this conversation, but you don't have an account yet.

          Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

          With your input, this post could be even better 💗

          Register Login
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          homogenous-expeditionary
          • Login

          • Don't have an account? Register

          • Login or register to search.
          • First post
            Last post
          0
          • Categories
          • Recent