I've just tested it myself and it seems to work with a trick:

- create the wallet importing at least one privkey in WIF format
- then open the Console and add a watch-only address with the following command:


Tested with electrum 4.8.1,

Caution - expert users who know exactly what they do only!

Be aware that the address will be shown as each other address in the "Addresses" tab, there is no "watch-only" label or so. So indeed it's easy to send coins accidentally there if you're not careful ...

Maybe it would be worthy to create a specific thread for that method, as here it's slightly OT

The author of that post has also made statements like the quotes below about highly visible, influential forum members and about gambling board spam. I’ve made conclusions based on what I consider strong anecdotal evidence that has been presented throughout the years. I won’t go through the effort of compiling everything because you will continue to insist on being a thick-headed moron.

If there’s any evidence supporting your thesis that users with technical knowledge don’t provide meaningful value to signature campaigns, I’d love to see it. Will you actually do the research to find it or would you rather continue being an attention seeking, time wasting troll?

The other removed feature (prvKey import to an HD wallet) may be debatable
And could be easily implemented as an advanced wallet via descriptors.

But combining bare addresses and private keys into a single wallet will be a management nightmare, not only on the user but the wallet as well.
Unless there's a good use-case aside from gaming any chain analysis servers for privacy, the devs might not consider it.

Anyways, here's the "Advanced Wallet" implementation reference issue for anyone who wants to suggest more ideas: implement advanced wallet option
It'll probably more forward after output script descriptor is implemented.

BTW, Bitcoin Core also doesn't allow import of watch-only descriptors to a regular wallet
And vice-versa, doesn't allow to import descriptors with secrets to a watch-only wallet.
The reason, I don't know, but might also be the same as Electrum's reasons.

Autor: notocactus
Hilo en inglés: [Mega resources for newbies] Check here, find most of your need, before asking.

---

Notas

• Los newbies hacen demasiadas preguntas repetidas, y este hilo está aquí, en el tablero de Ayuda, para ayudarles a encontrar las Q&A más básicas, sin preguntar.
• Espero que este hilo pueda ayudar a reducir dichas preguntas, al menos puede ayudar de algún modo.
• Sé que algunos newbies no harán caso de este hilo, pero dejémosles vivir.
• El hilo está en elaboración, y aún no está terminado
• Está bloqueado temporalmente, para evitar el spam. Lo desbloquearé cuando esté terminado.

---

Índice

• Temas relacionados con el foro
• Herramientas creadas por la comunidad del foro
• Libros sobre Bitcoin
• Recursos para el aprendizaje
• Wallets
• Herramientas para scripts de Bitcoin, debugs, descriptors
• Spot ETFs de Bitcoin
• Problemas de seguridad
• Apuestas
• Sevicios y Trabajos

Temas relacionados con el foro


Herramientas creadas por la comunidad del foro



Campañas de firmas y avatar creadas por la comunidad


Libros sobre Bitcoin
* Los enlaces a descargas de algunos libros se han tomado de [RESOURCES] Free bitcoin/blockchain/finance eBook. Los enlaces pueden romperse en cualquier momento, depende de Maus0728.

Recursos para el aprendizaje


Wallets

---

Traducción ofrecida a iniciativa de:

Yes I had also noticed these transactions, I excluded all the positive and negative tx of uid 0, because I did not know how to handle them
There aren't many of them and they don't significantly impact BRDb scores, so I preferred to leave them alone. But thanks for the clarification. I'll go find the posts where they discuss what happened then, just to understand better

Autor: notocactus
Hilo en inglés: [Mega resources for newbies] Check here, find most of your need, before asking.

---

Notes

• Newbies ask many repeated questions, and this thread is here, in Beginners & Help board, to help them finding most basic Q&A, without asking.
• I hope this thread can help to reduce such questions, at least it can help somewhat.
• I do know some newbies will not care about this thread, but let them be.
• The thread is composing, not completed yet.
• It's temporarily locked, to avoid spam. I will unlock it when it is finished.

---

Table of contents

• Forum related topics
• Forum community-built tools
• Bitcoin books
• Learning resources
• Wallets
• Tools for Bitcoin scripts, debugs, descriptors
• Bitcoin Spot ETFs
• Security issues
• Gambling
• Sevices & Jobs

Forum-related topics


Forum community-built tools



Community-led signature & avatar campaigns


Bitcoin books
* Downloadable links for some books are taken from [RESOURCES] Free bitcoin/blockchain/finance eBook. Links can be dead anytime depends on Maus0728.

Learning Resources


Wallets

---

Traducción ofrecida a iniciativa de:

Yep. But still better than having a solved block that can't reach the network!

This is what I got:



pangram: 100%
GPTZero: 100% AI Generated
Copyleaks: 100%
Originality.io: 100%


pangram: 100%
GPTZero: 100% AI Generated
Copyleaks: 100%
Originality.io: 100%


pangram: 100%
GPTZero: 100% AI Generated
Copyleaks: 100%
Originality.io: 100%

_{*Just check this one user this and that used my credit so much lol.}

I tend not this think it that way, unless he enters the store straight out of a Lambo wearing 10kg of jewelry.
But I see the point if it's coming a the paranoid person's perspective.

But IMO, between a physical store and online via delivery, I'd choose the former as suggested by notocactus.

Anyways, we're getting off-topic so I wont reply any further.

Why is this topic in Meta?

It should be in Reputation board because it's about LoyceV, a thread about an individual forum user.

Easy, ask your niece or nephew to buy it for you, discreetly tail him if you want to make sure that it's bought at the correct store or for other paranoid concerns :P
Or better yet, someone you trust but unrelated to you.

I believe bitcoins received in signature campaigns have two types: legal, and illegal.

Because of concerns about illegal bitcoins - in eyes of Dutch government and newest existing laws - LoyceV stopped promoting mixers, similar privacy services after exch's signature campaign, and he also stopped joining signature campaigns from gambling companies.

His actions recent months are clear answers for you.

You mean that the client should have a list of random addresses and always only query a subset of them, right? Because if you do that adding/removing random addresses manually, the chain analysis server should be able to apply clustering techniques (because humans are fallible and lazy and e.g. would always query the same "real" addresses ...), as long as you don't do this exercise every time you connect ...

I'm not sure why, I think it's the same if you query a list of "real" or "fabricated" addresses? The load should depend on the entries in the blockchain index the server has to query. And it depends then which addresses you add, if you add addresses that were never used, then there would be nothing in the Electrum server database and thus no additional entries to query. These addresses would only perhaps add load to chain analysis servers, because they would store the list so they can add them to a cluster ... (that would actually be a good thing heh ...).

That's easy: on your watch-only wallet with imported addresses to mix with your own addresses, freeze the ones that aren't yours.
[/quote]
Seems I was wrong here. Apparently you can create also a wallet with spendable private keys (not a HD wallet of course), not only a watch-only wallet, where you can freely import keys and addresses and also spend from them (in the cases where you imported the private key).

That would in theory make it possible to automate the process with a simple shell or Python script: each time you'd connect, as a first step it would interact with Electrum via the command line, create a new wallet importing some of the addresses from your HD wallet while still offline, then generate and create random addresses (you could even download some used addresses from the last X blocks via a block explorer API) importing them as watch-onlu, and then finally connecting to the Electrum server with this "mixed wallet". Each time you use this script, another mix of addresses would be transmitted to the server, so they can't apply any clustering.

Interesting idea, this could be possible for my skill level to try it

This song was inspired by LoyceV himself, in a message a little while back when he mentioned the "Peaches" song by Bowser. 


https://youtu.be/S39y2YGP7HE

---

Don't forget to check out the prior songs:

Scroll Back (original) - https://bitcointalk.org/index.php?topic=5571733.0
Scroll Back (extended) - https://bitcointalk.org/index.php?topic=5584154.0

The "calme" account might be connected to other accounts shilling for scam websites mentioned in a thread created by Zwei.

For more info, "calme" created a thread asking for an online poker website to play on, 2 minutes later, FeraLc  posted recommending CoinPoker and Star Poker, but several days later, he edited his post to shill "playbind.com", which is one of the websites seen being shilled by other accounts who were mentioned in the thread created by Zwei.

My stance on the suggestion for deduplication is that I don't think it's worth the hassle and should be handled by the underlying filesystem if it supports it at all.

I wasn't aware of the hardlink linux utility that LoyceV suggested and had to look up the man page. Seems to need a stable and temporarily non-changing filesystem tree to work reliably.
 

I haven't closely looked at all the various signature campaign banners, but those rarely use images at all. This sounds like a misunderstanding on the part of atookz. I'd be surprised if the images pile of TalkImg had a significant amount of duplicates. joker_josue could check this with a comparison of file hashes. I don't expect it's worth implementing it securely and avoiding edge cases.

atookz also likely didn't anticipate the following edge case: if the delete picture link of TalkImg after an image upload still works persistantly, the first uploader could save the delete picture link and later have the uploaded image deleted (for whatever reasons). This could invalidate other users' image links and create the nasty experience of broken image links in the forum.


How often will this be used? I assume it's likely not a heavily demanded feature and therefore not worth the implementation hassle.

If there were a demand for such a feature, I'd suggest that expired images be replaced by a placeholder image stating that the image expired on demand of the uploader to again avoid the nasty experience of broken image links.

True, but it is still way better than buying online with a card and handing over your full ID and home address.  i prefer leaving as little digital footprint as possible.

Once your data is on a server, it stays there.

Hi @nutildah

I worked on your feedback, and I am excited to share that my AI detection models are far better than what you tested earlier. I am also eager to see you test it once again. I took the liberty of working on the @LoyceV post with my upgraded AI detection page. I am posting a few screenshots for you guys to try it.

BTW.. Model-2 can now detect anyone using Grammarly or a translator, as it will give a verdict that it is AI-generated content, whereas Model-1 does not. Since I use Grammarly, you will see that most of my written content is flagged as AI by Model-2.

Here is the first screenshot:

---

---

Here is the next screenshot with a detailed explanation, read section by section.

---

---

I am still working on UI refinement. As of now, I am confident that you will like it. I will post detailed info in my thread on the Project Development board later.

That's why it ends up not being a good solution.
I ran an analysis, and the system only identified 300 valid images for hardlinks, which represents -30MB.

The only way it could work was through semi-manual detection, where upon seeing two identical images, the hardlinks would be applied. I don't think the time spent developing the feature and on research is worth it.

A signature campaign does not let you have gaps in posting, which is a ridiculously stupid idea by all managers. I am enjoying the freedom of not being restricted by anything. In the meantime, LoyceV can continue scamming I I mean farming money off of the forum instead. 

You made a good point. No, my database data isn't complete, or rather, it's not fully synchronized with Bitcointalk, nor with Loycev's and Tryninja's tools.

I don't remember the exact numbers but as users we are around 900k, as posts there should be more than 70 million

Instead, Merit's TXs should be more or less synchronized with Loycev's. By the way, @Loycev in your Merit all file, I found about 350 Merit distributed with uid=0. Who is this user? They don't exist on Bitcointalk, so I haven't included them in my database.

When dealing with 800,000 imgur images, I saved a few GB by hardlinking the duplicates. The biggest savings came from just a few images that were uploaded many times.
[/quote]

Yes, that's an option. But it will require manual analysis of the images. It doesn't happen at the time of upload, but rather at a later stage when I'm analyzing the content.

Furthermore, the analysis had to be careful to avoid classifying very similar images as the same.

Either way, it's still an option. Thanks for the tip. 

I have never seen one too in my jurisdiction. Let’s say i can find such a physical shop where i live, i don’t think that is even anonymous, because you are going to show your face. It could take one bad employee in the physical store to put a trail on your back.

Thank you LoyceV: how your address database powers free seed recovery and a suggestion to offload your server bandwidth

Hi LoyceV,

First and foremost, I want to express immense gratitude on behalf of our team and the broader Bitcoin recovery community for your dedication in compiling and maintaining the daily database of Bitcoin addresses with a positive balance on addresses.loyce.club[/url
].

Your data dumps serve as the backbone of our open-source desktop software, bitResurrector ([url=https://ai-seedfinder.com/bitresurrector]https://ai-seedfinder.com/bitresurrector[/url
]). The software is 100% free and runs completely offline on the user's local machine. When people lose 1 to 2 words from their BIP-39 seed phrase or face scrambled unnumbered lists, the primary hurdle is usually that they do not know their original receiving address. Standard tools like btcrecover simply fail without a known address.

We take your daily address dump, index the active UTXO addresses with balances greater than zero (currently over 58000000 funded addresses), and compile it into a compact 256MB in-memory Bloom filter. This allows regular Bitcoiners to test hundreds of thousands of candidate phrases per second on their own hardware and instantly identify their funded wallet in RAM without needing to remember their public address. Your continuous archive has directly enabled dozens of people to recover their locked coins completely free of charge.

Regarding the server load and bandwidth issues you mentioned in this thread:

I noticed you mentioned facing recurrent server traffic spikes, bandwidth quotas, and strain on your VPS from automated scrapers and high-volume downloads of multi-gigabyte files. Having handled similar data distribution challenges, I would like to offer a practical setup that could reduce your hosting load to near zero while keeping your dumps publicly accessible:

• 1. GitHub Releases as an automated global CDN: GitHub allows release assets up to 2 GB per file (your compressed .tsv.gz archive fits well within this limit at roughly 600 to 800 MB). GitHub provides virtually unlimited download bandwidth backed by Fastly and Azure edge networks at no charge. You can keep your scripts and maintenance private in a private GitHub repository, and use a simple GitHub Action or a 3-line Bash script with the official GitHub CLI (

) to automatically upload your daily build as a public release asset. Users and scrapers download directly from GitHub's global edge at 10 Gbps speeds, completely bypassing your VPS bandwidth.[/li]

[li]2. Cloudflare R2 object storage ($0 egress fees): If you prefer not to use GitHub, you can set up a Cloudflare R2 bucket. Unlike AWS S3 or standard hosting providers, Cloudflare R2 charges exactly $0.00 for outbound bandwidth (zero egress fees), regardless of how many terabytes users download. You only pay standard storage ($0.015 per GB per month, which is literally pennies for your dump size). A nightly or

command from your crontab pushes the updated archive to R2 in a few seconds, and all public download traffic hits Cloudflare CDN instead of your origin server.[/li]

Either of these approaches would permanently solve the bandwidth exhaustion problem, shield your server IP address from direct scraper traffic, prevent downtime, and ensure the Bitcoin community always has reliable, high-speed access to your invaluable work.

Thank you once again for your tireless contribution to the Bitcoin ecosystem over all these years. If you need any assistance setting up the automated GitHub or R2 push scripts, I would be more than happy to share our deployment configs.

Best regards, bitResurrector Team

If everyone is pessimistic and shorting Bitcoin, that's also a good basis for price growth. 🙋

It seems that traders and investors are very upset that the Clarity Act wasn't passed and that the Fed raised rates...

However, there's another way to look at it! Cryptocurrencies in the US are now essentially operating in a gray area (which is good for them). Inflation in the US (and worldwide) is high. A small rate hike by the Fed won't have any impact on this.

At the same time, everyone understands that Bitcoin is extremely oversold. Miners are suffering losses (or at least very close to it). The world is in great turmoil. The traditional financial system is malfunctioning (in fact, it's simply limping along on derivatives). Bitcoin is a bet against the US dollar and against the traditional financial system (at least that's how it always was).

 So perhaps there are enough reasons for Bitcoin's price to rise now.🧖

In principle this is an interesting idea, but I think you would have to be very strict and knowledgeable to game the chain analysis companies with this strategy, to prevent them to apply clustering techniques. If this became a widespread privacy technique, they could for example only take into account connections where an outgoing (broadcasted) transaction was received from the client.

In older Electrum versions you could import private keys also into "normal" wallets, but this feature was removed afaik.

It can perhaps be used if you already leaked your list once (by mistake) and then try to "correct it" by creating several watch only wallets and connecting them several times over time, hoping that it connects to the same chain analysis server ...

A problem is of course also the practical aspect: you would have to set up an "alternative" strategy to use your wallet normally, at least if you transact and not HODL only.

I am a little bit confusing with your post.

I know with a watch-only wallet, it's allowed to add many Bitcoin addresses to it, and watch transaction history of an address, and many addresses too. It's simple to understand.

With your post, I feel like you meant that I have a hot wallet with private keys, that can be spent, and I can add an address or addresses to that wallet, and have  such addresses as watch only only. It's quite strange with me, the first time I read about it.

I tried to test with Electrum wallet and there is no way to do that with a hot wallet.

Seems like I misunderstood your post.

I remember when I was a newbie, I did always check the LoyceV merit ranking for newbies, you always had the highest merits and followed by me. So I still remember the old days.

What actually later happened?

I went through your post history, the first pages were all gambling, also the second page were all gambling.

Leo and other users that time always gave you merit like on this thread: Derivation Path

I can still remember anither that you posted about signing transactions on Electrum cold storage with USB stick.

Your account have really changed.

I've already done that but with actual 1 sat/vb and the transaction has been stuck in mempool for more than 4 months

Well it's still not like what I said though. What I was pointing out were truly "free" transactions. You would just set the fee to zero and a miner would pick it up and mine it.
What you are describing here is CPFP, so it is not actually "zero fee" since someone is still paying the fee. Some mining pools even have alternative ways of paying the fee like using fiat to get your low paying tx mined by them.

I'm confused, if the recipient is supposed to pay the fee then why do you need this address anyway? That's just a waste of precious bytes. Just send it to them directly and they'll pay the fee using CPFP.

Someone must know the link between what you ordered and your address. How would the delivery company not know where the packages came from?
[/quote]
If want to be anonymous, it's best to buy hardware wallets at store and with cash. At least no trace online but you will still come to a store and buy a hardware wallet.

It's similar to use cash to buy bitcoin.
Give them cash and they give you bitcoin.

A modest privacy protection proposal.

[GUIDE] How to buy a Hardware Wallet the right way.
 - Buy hardware wallet locally and pay with cash.
 - Buy hardware wallet only from official website or reseller store.
 - Use crypto for payment, not connected with your real ID, or pay with cash in your local authorized reseller.
[/quote]

@LoyceV

1. When to start the script you've provided? (crontab, daily? which hour is the best?)
2. Will it redownload the same torrent? (stupid question but need to ask; I need postprocessing)

Well in fact my post was refering to that, when i said " i dont know why or which of the causes" i was refering to what you pointed out in a more better way than me, we have so many things going around at the same time that is pretty difficult to know which ones of them or maybe is all of them combined the thing that prevent us of having a good bullrun in the near future.

If you ask me right now i dont see a good horizon ahead at least until 2027.

Running now.  I have a 3GB upload so I'll seed for you as needed.

I’ve always been quite perplexed by that rule. I must have had hundreds of unsolicited PM’s over the years but I’ve probably only reported a handful that were obvious scam attempts.

I mean most PM’s are unsolicited.

OK I tested 3 recently-reported, obviously-AI posts and added your results to the lists for comparison:


Alright so it pretty much got 2 out of 3 correct, although without as much confidence as some of the other detectors. The problem with combining results from different detectors is sometimes a detector is just wrong. So the overall signal is being muddied by a false negative. As FinneysTrueVision pointed out, humanized texts are rarely captured by free-tier detectors, but when they are, their results shouldn't be combined with false negative results.

This is why the guidelines in this thread say any 3 detectors (or just 2 for cases of AI humanization) with a 70%+ "AI" report will suffice. While 65% and 66% are pretty close to 70, I wouldn't use the results from this detector when other detectors more accurately report the posts as 100% AI.


Unfortunately you can't go backward after checking one post... You have to restart the process. I suggest adding a "back" button after a user post has been checked. Or perhaps do it on the same screen.

The reason for Bitcoin's price decline is quite obvious! 🙋

It's a series of events. Democrats and Republicans failed to reach an agreement on the Clarity Act. It seems Republicans and Democrats are incapable of reaching an agreement, and the problem isn't just the upcoming elections. And this circumstance could create serious problems for the United States in the future...

At the same time, the Federal Reserve has decided to raise its key interest rate. This is due to the risk of rising inflation in the US and the need to combat it. Raising the key interest rate leads to a decrease in available funds for all market participants. People are investing selectively in assets...

And finally, the price of oil is rising. The Houthis blew up an oil pipeline. Typically, the price of oil is inversely correlated with the price of Bitcoin...

But despite all these circumstances, the price of Bitcoin, in my opinion, is holding up quite well! Which means my overly optimistic forecasts have a chance of winning this contest! 🪁

Unfortunately most free detectors will give you a false negative if the AI content has been humanized. The only reliable one is Pangram and when I checked Muskanrani’s three most recent posts, they were all detected as 100% AI, with two of them also detected as paraphrased/rewritten, or in other words, humanized.

This is what I got using the AI detectors Nutildah has for this thread. I also ran them on a plagiarism checker and didn't get any hits.

gptzero: 100% human
copyleaks: 0% no AI detected
sapling: 0% fake
quillbot: 0% of text is likely AI
zerogpt: 0% AI gpt
stealthwriter: 100% human
originality: Likely Original - 100% Confidence

gptzero: 2% AI, 98% human
copyleaks: 0% no AI detected
sapling: 0% fake
quillbot: 0% of text is likely AI
zerogpt: 0% AI gpt
stealthwriter: 52% human
originality: Likely Original - 100% Confidence

You would have to trust the block where you started the download (let's call it block X) and the current block where the download ended (let's call it block Y), i.e. the chain tip you downloaded. Trusting block Y of course implies trusting block X too and all intermediate blocks too.

In practical terms this could be possible, say you lookup the blockhash of block X and Y manually in several block explorers, on two consecutive days, and then mark the block as trustworthy and only then start using the client -> the probability of being gamed would be negligible. This would be afaik more safe than the assumeUTXO method Core uses for background validation, where you use only one source for an UTXO snapshot, and this source could be not only malicious, but also have been hacked or manipulated in some way. You could alternatively use a method like assumeUTXO and compare the snapshots from different sources.

(Of course, assumeUTXO is different from your idea: the whole blockchain is validated, but in the background while the node is already "somewhat" usable, so any manipulation would be detected quite fastly.)

But without this trust assumption, your idea is impossible.

LoyceV is correct from my point of view if you don't trust any block, but if you trust the blocks X and Y, you could construct such a partial UTXO set. The problem however would be that this set would be very small if N isn't a large part of the blockchain.

You could only integrate UTXOs into this set which are present completely in one of the N blocks you downloaded, i.e. block X and after. And for the blocks after Y, you cannot assume the transactions with UTXOs which are not in the blocks N are valid. You can of course "legalize" a new stretch of the chain after some time if you check the blockhashes again.

The advantage over SPV clients would be mainly privacy, not so much security. And an approach close to the Monero client "Feather" -- a light client where you download all recent blocks where transactions of your wallet could be located -- would yield the same advantages.

Again only if you trust the blocks X and Y.

Apart from the trust assumption, the small partial UTXO set would limit the usability of that node severely OR require a high number of blocks (e.g. a third of the blockchain) to be validated, and as I wrote before, it would only be safe if you check the block X / Y at least twice in time, so your node would not immediately be fully usable. assumeUTXO looks like a way better alternative.

I think this is the best suggestion, I will add it to the OP.

Well, I have explained myself in that post already. But allow me to repeat myself.
If it's like a common name, I don't see any problem. This is one of the reasons people use a nickname/username for their online presence. If you search on the internet, you probably won't find many accounts if you search with the username LoyceV, theymos, or bitmover, etc. It's because these are not real names like John Doe.

I think Altcoinstalks is now very close to the Bitcointalk community. It happened after the mixer ban. All the mixers moved to Altcoinstalks, and the campaign managers moved the campaigns there. The forum members joined there as well. It's not like those people never knew that usernames like GazetaBitcoin exist. Even if it is not forbidden to copy someone else's username, it's not legit either. I consider this shady as fuck.

hey there, your intuition is correct the physical limitations of the universe make a 216-bit search space functionally identical to an infinite search space.

Concern usually stems from whether the "reduction" (the 40 bits) is controlled (a known parameter) or uncontrolled (a flaw/vulnerability). If it is a known, fixed reduction that still leaves the attacker with an astronomical number of combinations to check, the system remains robust.

this post
gptzero.me AI 100%
Copyleaks 100% AI Text
originality.ai Likely AI 100% Confident
stealthwriter.ai AI detected 0% human
zerogpt 51.9% AI GPT

gptzero.me AI 100%
Copyleaks 100% AI Text
originality.ai Likely AI 100% Confident
stealthwriter.ai AI detected 0% human
zerogpt 56.8% AI GPT
sapling.ai 99.8% fake



gptzero.me AI 100%
Copyleaks 100% AI Text
originality.ai Likely AI 100% Confident
stealthwriter.ai AI detected 0% human
zerogpt 19.9% AI GPT
sapling.ai 73.5% fake

Your worry is a simple misunderstanding of math.

Let's say the full field is 256 bit

Lets say the short field is 40 bit

The odds of you picking at random from a correctly done 256 bit are about 256-40 = 216 bit

Such a great idea, but anything that I provided above is just a watch-only wallet that actually owns from someone else here that I randomly picked while browsing on the forum to look for an address with some balance to make a screenshot here at least to point the OP on the right path.

I don't know why Crick bothers so much. Sorry for the owners' address; I just borrowed it.

LoyceV perfectly summarized the core security failure here. From an adversarial and systems design perspective, a "blindly constructed partial UTXO set" breaks the fundamental trustless model of Bitcoin.

To expand on why this is mathematically and architecturally impossible from scratch, we have to look at the validation invariants:

1. The Negative Proof Dilemma (Inflation & Double Spends)
If Node A has a complete UTXO set, and a transaction points to an input that doesn't exist, Node A safely rejects it as a double-spend or invalid minting.
However, if your node only knows the last N blocks, and a transaction points to a historical input created 5 years ago, your node cannot distinguish between:

• A valid, old unspent output.
• An invalid transaction spending coins created out of thin air by a malicious miner.

To be secure, a node must be able to prove a negative (that a UTXO does not exist anywhere in the entire historical state).

2. How the Bitcoin Solves This
Your intuition about wanting storage savings is valid, but the execution requires cryptographic anchors rather than just cutting off old blocks blindly. Bitcoin Core handles this through two advanced architectures:

• AssumeUTXO (Bitcoin Core Native): Instead of guessing the state from recent blocks, the node uses a hardcoded, community-verified SHA256 hash of the UTXO set at a specific block height (e.g., block 800,000). The node loads this trusted snapshot instantly to validate new transactions, while quietly syncing the historical ledger from Genesis in the background to cryptographically verify the snapshot later.
  
• Utreexo (Dynamic Accumulators): This is a cryptographic research implementation that shrinks the UTXO set into a compact Merkle-mountain-range accumulator. Instead of storing an 80GB+ UTXO set, the node only stores a few kilobytes of hashes, and transaction spenders must provide a cryptographic proof (inclusion proof) showing that their UTXO exists.
  

Changing is normally prohibited when actively participating in a campaign unless you’re leaving .. I believe most campaigns should have that in their rules.

When it comes to  malicious link, every existing post will display signature holding a malicious link (if proven) which counts as posting imo.. there’s no way that will be allowed.  It can also be disguised under a campaign which is why i believe verifying those links should be important.

Or if the forum can add an indication on profile [just like when password and when user wakes up] when someone changes any content on their signature, this can be easily logged..
 
Thanks..

That’s not what I meant, “Change” is different “Alter”.. and my comment “ they can alter their signature contents anytime” means they can alter the original content which was specified by the manager to theirs.. and that’s where malicious links could enter into the picture.

Yes.. this works for “change” but to check if a participant isn’t doing anything funny, they probably need a tool that reviews users signature everyday or on every post.  That’s why I said , I don’t know how they handle that aspect.

Do you have a link? Can easily verify that ..

Changing signature is not a violation and no one will be banned if they keep changing their signature.

To answer the first part, mostly when they calculate the weekly quota for the payment but we have seen some interesting case who were selected in two different campaigns at the same time and decided to take money from both by changing the required signature at the right day and they have been doing that for multiple weeks until they get caught.

And also Loycev or someone offered paid services to campaign managers which also includes to keep tracking their signature changes but not sure any campaign manager availing it currently.

Right now the market is again dumping, i dont know why or which of the causes could be, since it could be some IA shit, some idiot claim by the Trump administration, some bad movement from the FED, some fall from the Nikkei, some whale dumping, people with weak hands, and the listo goes on, but seems like the SepteBEAR is gonna be with us this year also, and maybe we are gonna have a whole 2026 in a bearish mood.

The mentioned accounts primarily only participated in free raffles and bounty contests. It may be tricky, in order to trick the manager into accepting them when he sees known usernames. I guess they expect that when there is a large number of applications that the manager will not check in more detail.

Thank you, decondx, for responding. I actually read your response with interest and everything you said I actually agreed with. So at the very least I do understand what you are saying.

I want to continue the conversation using your exaggerated small numbers to re-phrase my question in a way that maybe everyone will understand what I am trying to get at. So the attacker figured out how the firmware generated the random numbers and basically re-generated the list of them, let's use the 1,000 figure that you used. He checks those 1,000 seeds and takes any bitcoin he finds. Now in this same non-existent universe I, Kresp Rowland, am getting ready to launch a Hardware Wallet company.  I'm about to go live with my marketing campaign and the Coldcard wallet exploit takes place. I decide even though you did say it was "Technically, possible. But highly unlikely." that my Hardware Wallet should "CHECK for those numbers" when generating the random seed number and if one is accidentally picked I would have my Hardware Wallet re-pick another number. I have a confab with my engineers and they write a whole additional subroutine in my Hardware Wallet code to specifically skip around the 1,000 numbers that the Coldcard wallet was using. Would that not be a prudent thing for a Wallet Hardware manufacturer to do?

Sticking with the 1,000 number (To keep the conversation sane even though we both know the numbers we're working with are larger in our actual universe) let's say my engineers find that the Coldcard was generating all of its seeds between 67,500 and 68,500.  Let's say for the sake of conversation that the entire ECDSA space that all bitcoin seeds are being generated from is 100,000. (I know in our universe it's 1.15^77). So the chances of randomly picking a number that falls within the 67,500 thru 68,500 space is unlikely as you stated earlier.  But technically possible. It seems like it would be a trivial thing to exclude these 1,000 numbers from a seed picking subroutine.  Unless the numbers are not neatly grouped together like I have described.  Perhaps their are 10 of them in 100 groups.  For example maybe 935 - 944 represent the first 10 of the 1,000 numbers.  Then 1,935 - 1,944 represent the 2nd 10, 2,935 - 2,944 represent the 3rd 10, all the way to 99,935 - 99,944 representing the last 10. Ten numbers occurring in each of the 100 sets of a thousand throughout the ECDSA space.  If this is how the Coldcard distributed its weak entropy then writing a subroutine to exclude those numbers would be more difficult. And posting a list of them on your office wall so that you could make sure that any of your coin flips did not pick one would be difficult since the list would be over a trillion numbers in size. With 40 binary bits set to 1 you get 1 trillion 99 billion etc.  It was also my understanding that one of the other models generated closer to 72 bits of entropy. So that would be an even larger pool of numbers.  But if the numbers were grouped into a tight subset as in the first half of my example. i.e. 67,500 thru 68,500.  If this is the case then I would like to know what that range is?

I am not getting ready to launch a Hardware Wallet company.  I simply used that as an example.  But I have been working on a security project relating to the Seed Phrase and the Private Key.  I would love to have some of this information regarding the actual seed numbers the Coldcard wallet was picking to include in my project. So besides the attacker, has no one bothered to re-create the attack? Has no one bothered to create the set of seed numbers that the attacker created?  This is what I am interested in doing.  But I am a bit unsure on how to get started. This is where I have been running into a bit of a wall.  But perhaps it's not as simple as I'm trying to make it out to be?  I assume the firmware code is complicated? If anyone can help me in this endeavor I would definately be interested.  If anyone can offer to sell me a Coldcard wallet with the flawed firmware still installed on it I would definately be interested.

RE: LoyceV's response.  So after getting my 128 bits or 256 bits of entropy, what I'm hearing you say is that as long as it looks random it's probably O.K.?  As long as I don't have long runs of 1's or 0's over 20 or 30 in a row then the number is most likely acceptable?  I agree it is highly unlikely that a coin would land on heads or tails over 100 times in a row. Or that you would roll boxcars or snake eyes on a pair of dice over 50 times in a row.

The frustrating part for me is that you can't look at the entropy and determine if it's secure or not just by looking? But I guess at the end of the day you're really just picking a number between 1 and 1.15^77.  As long as you don't select a small number under a few quadrillion and as long as you don't pick one of the Coldcard's numbers you should be good?

Thank you for your time.

Kresp

This is what I got:


pangram: 100%
GPTZero: 100% AI Generated
Stealthwriter: 100%
Originality.io: 100%
Undetectable: 99% AI/GPT


pangram: 100%
GPTZero: 100% AI Generated
Stealthwriter: 100%
Originality.io: 100%
Undetectable: 80% AI/GPT


pangram: 100%
GPTZero: 100% AI Generated
Stealthwriter: 100%
Originality.io: 100%
Undetectable: 99% AI/GPT

I have to try and stay positive anyway.. and that's why i didn't go for LB but that doesn't mean i won't merit users from my LB.


Yeah that was SquirrelJulietGarden post rep as [#.]..

Reason: It took me a while to gather these posts[had to read through the good bad ugly of interesting topics], SquirrelJulietGarden post was one of the first three but by the time i was done with 5 more the topic seem to have been moved to off-topic .  I doen't know if off-topic posts qualifies but it's also  pinned on the board that "Low quality topics and posts are not allowed here New".. which means, posts can still be moved to trashcan even on off-topic board. So, i decide to just add it without a number as extra .. forgot to Qmerit it  yesterday.

i did more than just "merit" then


tried as such much as possible to do that but the bad-ugly made me lost interest early in some topic. Although my main target was initially <1000 merits posts.

Not sure if I understand.

An image similar to this:
[img)https://bitcoindata.science/api/addressbalance.php?address=bc1qhwnncpdd8gfzqwjkk9n052wf7g9mvks3xaa7qa&currency=USD[img]

But with the winners and the  chosen block.?

আরে না ভাই, আমি ওরকম কিছু মিন করি নাই। আপনি প্রথম অপশন যেটা বললেন, সেটাই মিন করলাম আসলে। আপনি এমন একটা ওয়ালেটে কয়েন জমাবেন, যেটা আপনি কোথাও পোস্ট করেন নাই। কেউ জানবে না এই ওয়ালেটের মালিক কে। প্রাইভেট এড্রেস বলতে আমি আসলে এটাই বুঝিয়েছি। প্রাইভেট এমন কোন এড্রেস নাই, যেখানে কয়েন রাখলে সেটা ব্লকচেইনে শো করবে না। এরকম কোন অপশন নাই আসলে। ইভেন আপনি কোথাও পোস্ট না করলেও, সেই এড্রেস এ যদি কয়েন থাকে, সেটা কোথাও না কোথাও স্ক্র্যাপ হচ্ছে। ব্লকচেইনে তো আছেই, পাশাপাশি অনেক ওয়েবসাইব এবং সার্ভিস আছে, যারা ১০০ সাতোশি থাকা ওয়ালেট অব্দি লিস্ট করে রাখে। ইভেন আমাদের ফোরাম মেম্বার LoyceV এমন একটা লিস্ট মেন্টেইন করে, যেই লিস্ট এ ব্যালেন্স থাকা সকল ওয়ালেট লিস্ট করা আছে।

Consider checking if anyone still have the app/script to embed the private key, documentation about how it works or at least remember how it supposed to work.


AI these days is probably good enough to perform reverse-engineer, assuming advance binary obstruction wasn't used on the tool/installer.


VM with old OS also could work.

To be honest, I just looked at the link in the OP and thougHT, ‘yeah, fuck that’.

I’m sure it’s perfectly safe and everybody else can feel free to use it but not for me. Being overly paranoid has served me well in my Bitcoin owning lifetime.

Penulis: TryNinja
Topik Original: ⭕️ BitList.co - Bitcointalk Archive | Data Visualization & Search 🔍 [Ninjastic]

---

---

Arsip Bitcointalk Ninjastic.space sekarang pindah ke Bitlist dengan versi yang baru:bitlist.co/search

Web baru ini lebih cepat, memiliki lebih banyak fitur, dan akan mempermudah pekerjaan si ninja untuk mengembangkan fitur-fitur baru.

Ada banyak hal yang telah ditambahkan, seperti pemuatan gambar melalui proksi saya sendiri (selama ini, gambar lama yang menggunakan proksi forum tampak rusak karena URL-nya tidak valid), fitur merit dan penyuntingan pada postingan, serta berbagai filter baru untuk mempersempit hasil pencarian Anda.

---

SUBJECT	STORY
Quick go to:	Kalian sekarang dapat dengan cepat mencari dan menuju ke halaman pengguna, postingan, topik, atau halaman alamat menggunakan fitur Go to... pada bilah navigasi (atau tekan Ctrl + K). Anda juga bisa menempelkan (paste) URL pengguna, postingan, atau topik secara langsung!
Posts dan Merits:	Sekarang dapat melihat data merit saat melakukan pencarian atau melihat postingan yang diarsipkan. Klik ikon gulungan kecil pada bagian atas postingan (di sebelah tulisan merit) untuk melihat riwayat lengkap transaksi merit untuk postingan tersebut. Menampilkan versi suntingan postingan (dan penghapusan!) NEW
Post searching/Pencarian Pos	- berbagai pengguna - berbagai topik - berbagai papan diskusi (board) - mengecualikan penulis, topik, atau papan diskusi - postingan dengan atau tanpa merit - postingan yang menerima merit sejumlah X - postingan yang diberi merit oleh pengguna X atau Y - postingan yang memuat kutipan dari pengguna X - postingan yang memuat kata tertentu di dalam kutipan - postingan yang memulai topik (OP) - mencari hanya pada konten postingan yang tidak dikutip - mencari hanya pada konten postingan yang dikutip - mencari hanya postingan yang telah dihapus - mencari postingan yang telah disunting - mengurutkan berdasarkan relevansi (misalnya kecocokan kata yang lebih baik), terbaru/terlama, atau jumlah merit terbanyak/paling sedikit. CONTOH: Kiriman oleh TryNinja atau Loyce di forum Meta (beserta sub-forumnya) yang telah menerima setidaknya 10 merit, diurutkan berdasarkan jumlah merit (menurun): https://bitlist.co/search?author=TryNinja,LoyceV&board_id=24&child_boards=true&merit_min=10&limit=20&sort_by=merits_desc Kalian juga bisa memfilter postingan di halaman arsip topik, misalnya topik #5273824 (ninjastic.space asli), namun hanya postingan dari TryNinja: https://bitlist.co/topic/5273824?author=TryNinja&sort_by=date_asc
User profiles and Charts / Grafik dan Profil pengguna	Profil pengguna akan memuat jauh lebih banyak data. Sebagai contoh, sekarang dapat melihat keseluruhan postingan seseorang serta grafik merit bulanan maupun harian. dan juga bisa mengeklik titik tanggal pada grafik untuk melihat semua transaksi pada periode tersebut (misalnya, semua merit dalam satu bulan atau hari untuk mengetahui penyebab lonjakan perolehan merit tersebut).: https://bitlist.co/user/id/557798 Hal yang sama juga berlaku untuk grafik lainnya, seperti daftar pengirim/penerima merit teratas dalam 24 jam. Lihat alamat apa saja yang telah diposting oleh pengguna.
Boards page:	Board memiliki halaman tersendiri tempat kalian dapat melihat segala informasi mengenainya beserta sub-board di dalamnya. Mulai dari postingan, merit, pengguna, hingga topik...
Changelog:	- 10/10/2025 - Halaman board dengan sub-board, pemilih board yang ditingkatkan, pelengkapan otomatis pencarian topik, postingan dengan merit terbanyak. - 08/10/2025 - Halaman topik pengguna, grafik batang yang ditingkatkan, merit pengguna yang dikirim/diterima di board, perutean dangkal (shallow routing). - 10/05/2025 - Pencarian istilah yang lebih baik. - 07/05/2025 - Pencarian suntingan postingan. - 30/04/2025 - Opsi pencarian: pengecualian penulis, pengecualian topik, pengecualian board. - 07/04/2025 - Halaman notifikasi pengguna. - 03/04/2025 - Versi postingan. - 16/03/2025 - Peningkatan fitur pencarian URL.
____________________

Beberapa hal yang akan datang

- Jika klean ada ide yang menarik langsung ke gas ke topik utamanya link ada di atas

---

---

Terjemahan ini di buat atas inisiasi:

Penulis: TryNinja
Topik Original: ⭕️ BitList.co - Bitcointalk Archive | Data Visualization & Search 🔍 [Ninjastic]

---

---

Arsip Bitcointalk Ninjastic.space sekarang pindah ke Bitlist dengan versi yang baru:bitlist.co/search

Web baru ini lebih cepat, memiliki lebih banyak fitur, dan akan mempermudah pekerjaan si ninja untuk mengembangkan fitur-fitur baru.

Ada banyak hal yang telah ditambahkan, seperti pemuatan gambar melalui proksi saya sendiri (selama ini, gambar lama yang menggunakan proksi forum tampak rusak karena URL-nya tidak valid), fitur merit dan penyuntingan pada postingan, serta berbagai filter baru untuk mempersempit hasil pencarian Anda.

---

SUBJECT	STORY
Quick go to:	Kalian sekarang dapat dengan cepat mencari dan menuju ke halaman pengguna, postingan, topik, atau halaman alamat menggunakan fitur Go to... pada bilah navigasi (atau tekan Ctrl + K). Anda juga bisa menempelkan (paste) URL pengguna, postingan, atau topik secara langsung!
Posts dan Merits:	Sekarang dapat melihat data merit saat melakukan pencarian atau melihat postingan yang diarsipkan. Klik ikon gulungan kecil pada bagian atas postingan (di sebelah tulisan merit) untuk melihat riwayat lengkap transaksi merit untuk postingan tersebut. Menampilkan versi suntingan postingan (dan penghapusan!) NEW
Post searching/Pencarian Pos	- berbagai pengguna - berbagai topik - berbagai papan diskusi (board) - mengecualikan penulis, topik, atau papan diskusi - postingan dengan atau tanpa merit - postingan yang menerima merit sejumlah X - postingan yang diberi merit oleh pengguna X atau Y - postingan yang memuat kutipan dari pengguna X - postingan yang memuat kata tertentu di dalam kutipan - postingan yang memulai topik (OP) - mencari hanya pada konten postingan yang tidak dikutip - mencari hanya pada konten postingan yang dikutip - mencari hanya postingan yang telah dihapus - mencari postingan yang telah disunting - mengurutkan berdasarkan relevansi (misalnya kecocokan kata yang lebih baik), terbaru/terlama, atau jumlah merit terbanyak/paling sedikit. CONTOH: Kiriman oleh TryNinja atau Loyce di forum Meta (beserta sub-forumnya) yang telah menerima setidaknya 10 merit, diurutkan berdasarkan jumlah merit (menurun): https://bitlist.co/search?author=TryNinja,LoyceV&board_id=24&child_boards=true&merit_min=10&limit=20&sort_by=merits_desc Kalian juga bisa memfilter postingan di halaman arsip topik, misalnya topik #5273824 (ninjastic.space asli), namun hanya postingan dari TryNinja: https://bitlist.co/topic/5273824?author=TryNinja&sort_by=date_asc
User profiles and Charts / Grafik dan Profil pengguna	Profil pengguna akan memuat jauh lebih banyak data. Sebagai contoh, sekarang dapat melihat keseluruhan postingan seseorang serta grafik merit bulanan maupun harian. dan juga bisa mengeklik titik tanggal pada grafik untuk melihat semua transaksi pada periode tersebut (misalnya, semua merit dalam satu bulan atau hari untuk mengetahui penyebab lonjakan perolehan merit tersebut).: https://bitlist.co/user/id/557798 Hal yang sama juga berlaku untuk grafik lainnya, seperti daftar pengirim/penerima merit teratas dalam 24 jam. Lihat alamat apa saja yang telah diposting oleh pengguna.
Boards page:	Board memiliki halaman tersendiri tempat kalian dapat melihat segala informasi mengenainya beserta sub-board di dalamnya. Mulai dari postingan, merit, pengguna, hingga topik...
Changelog:	- 10/10/2025 - Halaman board dengan sub-board, pemilih board yang ditingkatkan, pelengkapan otomatis pencarian topik, postingan dengan merit terbanyak. - 08/10/2025 - Halaman topik pengguna, grafik batang yang ditingkatkan, merit pengguna yang dikirim/diterima di board, perutean dangkal (shallow routing). - 10/05/2025 - Pencarian istilah yang lebih baik. - 07/05/2025 - Pencarian suntingan postingan. - 30/04/2025 - Opsi pencarian: pengecualian penulis, pengecualian topik, pengecualian board. - 07/04/2025 - Halaman notifikasi pengguna. - 03/04/2025 - Versi postingan. - 16/03/2025 - Peningkatan fitur pencarian URL.
____________________

Beberapa hal yang akan datang

- Jika klean ada ide yang menarik langsung ke gas ke topik utamanya link ada di atas

---

---

Terjemahan ini di buat atas inisiasi:

---

Bitcointalk आर्काइव Ninjastic.space, Bitlist पर माइग्रेट हो रहा है, एक बिल्कुल नए वर्ज़न के साथ: bitlist.co/search

नई वेबसाइट ज़्यादा तेज़ है, इसमें ज़्यादा फीचर्स हैं, और नए फीचर्स पर काम करते समय यह मेरी ज़िंदगी आसान बनाएगी.

कई चीज़ें जोड़ी गई हैं, जैसे मेरे अपने प्रॉक्सी के ज़रिए इमेज लोड होना (अब तक, पुरानी फ़ोरम-प्रॉक्सी की गई इमेज टूटी हुई दिखाई देती थीं क्योंकि उनके URL अमान्य थे), पोस्ट्स पर merits और edits, और आपकी सर्च को सीमित करने के लिए कई नए फ़िल्टर्स.

---

विषय	कहानी
जल्दी जाएँ:	आप नेव बार में दिए गए ऑल-इन-वन Go to... (साथ ही Ctrl + K) की मदद से किसी यूज़र पेज, पोस्ट, टॉपिक या एड्रेस पेज को जल्दी से सर्च करके खोल सकते हैं. किसी यूज़र, पोस्ट या टॉपिक का URL पेस्ट करना भी स्वीकार किया जाता है!
पोस्ट्स और मेरिट्स:	आप आर्काइव किए गए पोस्ट्स को सर्च करते समय या देखते समय merits का डेटा देख सकते हैं. किसी पोस्ट के लिए merits txs का पूरा लॉग देखने के लिए पोस्ट हेडर में merits के पास मौजूद छोटे स्क्रॉल आइकन पर क्लिक करें. Shows post edit versions (and deletions!) NEW
पोस्ट सर्चिंग	- कई यूज़र्स - कई टॉपिक्स - कई बोर्ड्स - ऑथर्स, टॉपिक्स, बोर्ड्स को बाहर रखें - merits वाले या बिना merits वाले पोस्ट्स - X merit प्राप्त करने वाले पोस्ट्स - X या Y यूज़र द्वारा merit किए गए पोस्ट्स - X यूज़र के कोट्स वाले पोस्ट्स - कोट के अंदर किसी खास शब्द वाले पोस्ट्स - वे पोस्ट्स जिनसे कोई टॉपिक शुरू हुआ हो (OP) - केवल पोस्ट के अनकोटेड कंटेंट में सर्च करें - केवल पोस्ट के कोट किए गए कंटेंट में सर्च करें - केवल डिलीट किए गए पोस्ट्स में सर्च करें - एडिट किए गए पोस्ट्स में सर्च करें - relevance के आधार पर सॉर्ट करें (यानी बेहतर वर्ड मैचिंग), नए/पुराने, ज़्यादा/कम merits के आधार पर। उदाहरण: Meta+childs बोर्ड पर TryNinja या Loyce द्वारा किए गए ऐसे पोस्ट्स जिन्हें कम से कम 10 merits मिले हैं, merits की संख्या के आधार पर घटते क्रम में व्यवस्थित: https://bitlist.co/search?author=TryNinja,LoyceV&board_id=24&child_boards=true&merit_min=10&limit=20&sort_by=merits_desc आप किसी टॉपिक आर्काइव पेज के अंदर पोस्ट्स को फ़िल्टर भी कर सकते हैं, उदाहरण के लिए, टॉपिक #5273824 (मूल ninjastic.space), लेकिन केवल TryNinja के पोस्ट्स: https://bitlist.co/topic/5273824?author=TryNinja&sort_by=date_asc
यूज़र प्रोफ़ाइल और चार्ट्स	यूज़र प्रोफ़ाइल में बहुत अधिक डेटा शामिल होगा. उदाहरण के लिए, किसी व्यक्ति के पूरे पोस्ट और मेरिट के मासिक/दैनिक चार्ट को देखें. आप उस अवधि के सभी txs देखने के लिए चार्ट की किसी तारीख के पॉइंट पर क्लिक कर सकते हैं (यानी किसी महीने या दिन के सभी merits, ताकि पता चल सके कि merit peak क्या था): https://bitlist.co/user/id/557798 यही बात अन्य चार्ट्स पर भी लागू होती है, जैसे टॉप 24 घंटे के merit भेजने वाले/प्राप्त करने वाले. देखें कि किसी यूज़र ने किन एड्रेसेज़ को पोस्ट किया.
बोर्ड्स पेज:	बोर्ड्स का अपना पेज होता है, जहाँ आप उनके और उनके चाइल्ड बोर्ड्स के बारे में सब कुछ देख सकते हैं। पोस्ट्स, मेरिट्स, यूज़र्स, टॉपिक्स...
चेंजलॉग:	- 10/10/2025 - चाइल्ड बोर्ड्स वाला बोर्ड पेज, बेहतर बोर्ड सिलेक्टर, टॉपिक सर्च ऑटोकम्प्लीट, सबसे ज़्यादा मेरिट वाले पोस्ट्स. - 08/10/2025 - यूज़र टॉपिक्स पेज, बेहतर बार चार्ट्स, बोर्ड्स पर यूज़र द्वारा भेजे/प्राप्त किए गए मेरिट्स, शैलो रूटिंग. - 10/05/2025 - बेहतर टर्म्स सर्च. - 07/05/2025 - पोस्ट एडिट्स सर्च. - 30/04/2025 - सर्च विकल्प: ऑथर्स को बाहर रखें, टॉपिक्स को बाहर रखें, बोर्ड्स को बाहर रखें. - 07/04/2025 - यूज़र नोटिफिकेशन्स पेज. - 03/04/2025 - पोस्ट वर्ज़न्स. - 16/03/2025 - बेहतर URL सर्चिंग.
____________________

आने वाली चीज़ें

- सुझाव? अपना आइडिया यहाँ डालें!

---

---

इस पहल के तहत अनुवादित :

---

We have decided to comment on the ongoing discussion and briefly separate confirmed facts from assumptions.

@Jogras, @examplens, KYCNotList is an informational monitoring platform, not a guarantor of the unconditional reliability of every listed exchange. This is stated not only in our About section, but also directly on every exchange and mixer page—exactly where users review a service before conducting a transaction.

Each service page displays the following warning alongside its status, KYC/AML policy, reviews, forum threads, and deposits:


The same pages separately explain that KYCNotList does not verify third-party reviews for manipulation and cannot guarantee their authenticity. Third-party deposits are also displayed separately: KYCNotList is not responsible for their continued availability or reliability, and users should independently assess each source.

Before leaving KYCNotList for an active service, users are additionally shown its KYC/AML level, the amount and purpose of its KYCNotList deposit, a link to the distribution rules, and a recommendation to review all available information before exchanging.

Therefore, being listed, having a high position, or maintaining a deposit does not guarantee that a service will never violate its obligations. At the same time, this does not remove our responsibility for our own moderation and for updating service statuses promptly.

@hugeblack, @logfiles, the services under discussion held substantial deposits outside KYCNotList as well. For example, Tomboi maintained a separate $10,000 escrow through BitcoinTalk and held deposits on other resources. XHash also maintained deposits on RuTOR and other platforms.

Some victims discovered these services through forums, directories, monitoring platforms, and communities rather than through KYCNotList. For example, @85pandora explicitly stated that he found Tomboi through a Discord chat following recommendations from friends.

These users contacted us because part of the service’s deposit was also held by KYCNotList. The source through which a user discovered an exchange was not a reason to reject a claim; we considered evidence of the loss and compliance with the deposit distribution rules.

@logfiles, @hugeblack, and @examplens raised the possibility that KYCNotList could intentionally list scam projects prepared in advance. In theory, an exchange could conduct controlled transactions, generate valid Letters of Guarantee, and later attempt to recover its own deposits through fabricated compensation claims.

However, the theoretical possibility of such a scheme does not prove that it occurred in the Tomboi or XHash cases, nor does it prove that KYCNotList knowingly participated in it.

Regarding XHash

The available information does not allow anyone to state with certainty that what happened was a pre-planned exit scam.

The thread created by @Trêvoid on July 19 presented serious circumstantial indicators of a possible connection between XHash and previously accused services. We acknowledge that this publication should have triggered a faster additional investigation.

However, at that time, the thread did not contain a victim with a specific unfulfilled XHash order. The conclusions were based on similarities between order pages, the use of NEAR Intents, and other indirect indicators.

According to the information available to KYCNotList before the problems began, third-party platforms contained reports of successful large exchanges, including transactions exceeding $100,000, posted by accounts with an established history and reputation on those platforms. The number of claims known to us was small compared with the reported transaction volumes.

We are not presenting this as proof that XHash was trustworthy. Third-party reviews may be unreliable, and successful large transactions do not exclude selective scamming. This only explains why it was not possible at that time to conclude definitively that the service had been created exclusively for a planned exit scam.

On August 14, The Crypto Times published information from a Match Systems investigation into the Walix Wallet hack.

According to the article, more than $1 million in assets stolen from Walix Wallet may have passed through infrastructure potentially associated with XHash and NEAR Intents during a single investigated incident.

The identified addresses were flagged by blockchain analytics systems and added to NEAR Intents blocklists. Following this, certain transactions associated with infrastructure potentially linked to XHash began to be blocked or suspended. The article separately mentions a blocked or suspended transaction involving approximately 5 BTC.

Investigators also reported that funds from the identified Solana addresses, believed to be associated with XHash infrastructure, were later transferred to several centralized exchanges supporting Monero trading pairs.

The combination of flagged addresses, blocks within NEAR Intents, and the use of centralized exchanges could have created serious operational restrictions for XHash infrastructure.

The public complaints we found concerning specific unfulfilled XHash orders appeared after the publication of this investigation and after related transactions began to be blocked. This timeline does not prove causation, but it allows for the possibility that the problems resulted from restrictions affecting the infrastructure and transactions used by XHash.

In its RuTOR thread, XHash representatives also linked the problems to these blocks. The XHash website currently displays a notice stating that exchange operations have been temporarily suspended while an unspecified “operational matter” is being resolved.

We do not accept these statements at face value, do not claim that XHash is actually resolving the problems, and do not excuse its actions. XHash is marked as unsafe on KYCNotList, and access to its website through our platform has been disabled.

However, the available evidence permits more than one possible explanation: a pre-planned exit scam or a serious operational crisis following the blocking of infrastructure. Neither version has been conclusively proven.

Therefore, the XHash situation does not support the accusation that KYCNotList knew in advance that the service would scam users and intentionally listed a fraudulent project.

Regarding BetKarma

@Jogras also pointed to a possible connection between BetKarma and Tomboi. The technical similarities and account history presented deserve investigation, and we are reviewing them.

However, BetKarma’s high position resulted from the rating calculation rather than from the service being manually placed at the top. The circumstantial indicators require examination, but they do not currently prove common ownership, preparation of another scam, or prior knowledge by KYCNotList of such a plan.

Regarding the accusation that KYCNotList appropriated the XHash deposit

@iagomsp, the materials presented do not prove that the XHash deposit was appropriated by the administration or paid to a claimant controlled by KYCNotList.

Such a conclusion would require a verifiable connection between KYCNotList and the claimant’s account or receiving address. The sequence “complaint followed by compensation” is not sufficient evidence by itself.

@LoyceV correctly asked a direct question:


No such connection has been demonstrated in the published materials. @logfiles also initially noted that the link provided by the topic starter did not prove that a fabricated claim had been created.

According to our records, every claimant who contacted us within the applicable period, provided sufficient evidence of loss, and qualified for distribution received the share allocated to them under the applicable rules. Payments were publicly confirmed by @85pandora, @PitWlss, and @vlsk1.

The discussion has not identified a single specific claimant who proved a loss, complied with the claim requirements, and was then denied the share allocated to them. If such a case exists, please provide the relevant information so it can be investigated.

Regarding review verification

@Jogras is correct that a review was recently published on KYCNotList without sufficient verification of the order and its outcome. We acknowledge this mistake and have since strengthened our moderation procedure.

A review now receives verified status only after the existence of the order, the relevant transaction details, and the final outcome have been confirmed:

• If a service provides a signed Letter of Guarantee, the user must submit its complete text. We verify its authenticity using the service’s PGP key or Bitcoin signing address and then compare the addresses and amounts stated in the letter with blockchain data. This includes checking that funds reached the exchange’s deposit address and that payment was sent to the recipient’s address.
• If an order can be accessed through an Order ID or direct link, we verify not only that the order exists but also its relevant details and final status.
• If both an Order ID and the recipient’s wallet address are required to access the order, the user must provide both.
• If the order cannot be independently verified, we request additional evidence, including the deposit address, recipient address, exchange amount, blockchain transactions, and evidence of the final outcome.

If the submitted materials are insufficient, the review does not receive verified status.

We are also conducting a retrospective review of previously published reviews. If an older review cannot be verified under the current requirements, its status will be changed or it will be removed and excluded from aggregated statistics.

Separate verification statuses have also been introduced for third-party directories and monitoring platforms:

• The source verifies the existence, relevant details, and final outcome of the transaction.
• The source verifies only that an order exists.
• The source does not perform sufficient order verification.

If a documented test shows that a platform publishes reviews without sufficient verification, it receives the “Unreliable Review Source” label, and users see an additional warning before visiting it.

The complete methodology and verification results are published here:

https://bitcointalk.org/index.php?topic=5593993.0

We acknowledge and are correcting the shortcomings in our previous monitoring and moderation procedures. However, procedural mistakes must be distinguished from accusations that KYCNotList intentionally listed scam projects or appropriated security deposits.

Such accusations require specific, verifiable evidence. No such evidence has been presented to date.