Skip to content
  • Categories
  • Recent
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Slate)
  • No Skin
Collapse
Brand Logo

hashpwn

Home | Donate | GitHub | Matrix Chat | PrivateBin | Rules

  1. Home
  2. Hash Cracking / Recovery
  3. Crypto Currency: $bitcoin$ $metamask$ $electrum$ $ethereum$ $blockchain$, etc.
  4. Phantom Wallet Repair

Phantom Wallet Repair

Scheduled Pinned Locked Moved Crypto Currency: $bitcoin$ $metamask$ $electrum$ $ethereum$ $blockchain$, etc.
4 Posts 2 Posters 12 Views 2 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S Offline
    S Offline
    safisafo
    wrote last edited by
    #1

    Hello. So long story short, I had a bridge wallet (not important) on phantom just used for certain movements.

    This morning the extension said there was something wrong and to click on Repair and I clicked. Unluckily, it deleted everything inside, including the wallet. It does not have much but I would like to recover it, and since I just use it every here and there I did not note the seed.

    However I have a system backup from 4 days ago. I tried to simple copy-paste the backup into the phantom folder under AppData but it does not work. It asks for new wallet creation and then overrides what I just pasted. Any idea on how to import it?

    1 Reply Last reply
    0
    • cycloneC Offline
      cycloneC Offline
      cyclone
      Admin Trusted
      wrote last edited by
      #2

      You might try running phantom_extractor on a copy of your backup. If the vault is still there, the tool will extract and print it like the example below. To do this, you'll need to find the bfnaelmomeimhlpmgjnjophhpkkoljpa directory in your backup which is where Phantom stores the vault. A quick read through the phantom_pwn GitHub README will show you the default location of this directory.

      GitHub:
      https://github.com/cyclone-github/phantom_pwn

      Forum topic:
      https://forum.hashpwn.net/post/75

      ./phantom_extractor.bin bfnaelmomeimhlpmgjnjophhpkkoljpa/
       ----------------------------------------------------- 
      |        Cyclone's Phantom Vault Hash Extractor       |
      |        Use Phantom Vault Decryptor to decrypt       |
      |    https://github.com/cyclone-github/phantom_pwn    |
       ----------------------------------------------------- 
      {"encryptedKey":{"digest":"sha256","encrypted":"5pLvA3bCjNGYBbSjjFY3mdPknwFfp3cz9dCBv6izyyrqEhYCBkKwo3zZUzBP44KtY3","iterations":10000,"kdf":"pbkdf2","nonce":"NZT6kw5Cd5VeZu5yJGJcFcP24tnmg4xsR","salt":"A43vTZnm9c5CiQ6FLTdV9v"},"version":1}
      ...
      

      Sysadmin by day | Hacker by night | Go Developer | hashpwn site owner
      3x RTX 4090

      S 1 Reply Last reply
      0
      • S Offline
        S Offline
        safisafo
        wrote last edited by
        #3
        This post is deleted!
        1 Reply Last reply
        0
        • cycloneC cyclone

          You might try running phantom_extractor on a copy of your backup. If the vault is still there, the tool will extract and print it like the example below. To do this, you'll need to find the bfnaelmomeimhlpmgjnjophhpkkoljpa directory in your backup which is where Phantom stores the vault. A quick read through the phantom_pwn GitHub README will show you the default location of this directory.

          GitHub:
          https://github.com/cyclone-github/phantom_pwn

          Forum topic:
          https://forum.hashpwn.net/post/75

          ./phantom_extractor.bin bfnaelmomeimhlpmgjnjophhpkkoljpa/
           ----------------------------------------------------- 
          |        Cyclone's Phantom Vault Hash Extractor       |
          |        Use Phantom Vault Decryptor to decrypt       |
          |    https://github.com/cyclone-github/phantom_pwn    |
           ----------------------------------------------------- 
          {"encryptedKey":{"digest":"sha256","encrypted":"5pLvA3bCjNGYBbSjjFY3mdPknwFfp3cz9dCBv6izyyrqEhYCBkKwo3zZUzBP44KtY3","iterations":10000,"kdf":"pbkdf2","nonce":"NZT6kw5Cd5VeZu5yJGJcFcP24tnmg4xsR","salt":"A43vTZnm9c5CiQ6FLTdV9v"},"version":1}
          ...
          
          S Offline
          S Offline
          safisafo
          wrote last edited by
          #4

          @cyclone Trying to extract the vault gives me checksum mistakes with Chrome

          1 Reply Last reply
          0
          Reply
          • Reply as topic
          Log in to reply
          • Oldest to Newest
          • Newest to Oldest
          • Most Votes


          Who's Online [Full List]

          13 users active right now (2 members and 11 guests).
          hashpwn-bot

          Board Statistics

          Our members have made a total of 10.8k posts in 178 topics.
          We currently have 376 members registered.
          Please welcome our newest member, safisafo.
          The most users online at one time was 49 on Thursday, December 26, 2024.

          • Login

          • Don't have an account? Register

          • Login or register to search.
          • First post
            Last post
          0
          • Categories
          • Recent