Search key, WIF, mnemonic across 18 chains CtrlK

Dark Skippy

The Dark Skippy exploit lets a malicious signing device leak a wallet's seed by burying it — split into two halves — inside the ECDSA signature nonces it produces. Because each nonce is a small scalar, the public nonce R = k·G is reconstructed from the signature and the nonce is recovered with Pollard's Kangaroo in O(√range) hops. One nonce yields the signing key d = (s·k − z)/r (verified against the on-chain public key); two nonces are the two seed halves. Run the live recovery, or scan a Bitcoin address / TXID — everything runs in your browser.

Bitcoin

Ethereum

BNB Chain

Arbitrum

Optimism

Base

Polygon

Avalanche

zkSync Era

Solana

Tron

TON

Sui

XRP

Litecoin

Bitcoin Cash

Dogecoin

Zcash

Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.

Transactions to fetch: newest for the address (exactly this many are scanned; a single TXID fetches just that one transaction)

On-chain scan range 2^bits, bits = Used by Analyze above when scanning a TXID/address for a low-entropy nonce. Keep ≤ 32 for an instant result.

Kangaroo key solver Recover a real private key from a public key that lies inside a known keyspace.

Default — in-browser Multi-core JavaScript Kangaroo. Runs anywhere, nothing to install. Best for ranges up to 2⁴⁴. kgaroocgtegein — native PC / localhost only Full-speed C DLL (Kangaroo_CPU) via a local server on your PC. Handles huge ranges. Run python server.py in kgaroocgtegein/.

CPU cores Default 4. Pick more for the native engine — your PC's cores are listed once its server is online. Applies to both the on-chain scan and the solver.

The private key must lie inside the keyspace. Real-time speed, total hops and progress appear below while it runs. This recovers a genuine key — it is not a demo.

Balance 0 BTC

Received 0 BTC

TX 0

Instructions:
1. Kangaroo key solver — paste a public key and a keyspace (start:end in hex), tick an engine (Default in-browser, or kgaroocgtegein native on your PC), then click Solve. Pollard's Kangaroo hops the range and returns the private key the moment it regenerates that public key. Real-time speed, total hops and progress show above.
2. Or enter a Bitcoin address / 64-character TXID and click Analyze to extract R, S, Z and scan each signature's nonce range for a low-entropy (Dark Skippy) nonce.
3. A private key is shown only when it regenerates the public key, so there are no false positives.
4. The scan range (bits) sets how large a nonce the on-chain scan will hop. Real wallets use full-entropy nonces, so a scan correctly finds nothing. An internet connection is needed only for the on-chain scan.

Educational tool. The Kangaroo key solver recovers a real private key from a public key that lies inside the keyspace you provide, using Pollard's Kangaroo — in your browser by default, or through the native kgaroocgtegein engine on your own PC for full speed on large ranges. The on-chain scan fetches data live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback) and only reports a key when it regenerates the on-chain public key; nothing is guessed. Only solve keyspaces you are authorised to search. Never enter keys for wallets you use.