Search key, WIF, mnemonic across 18 chains CtrlK

Minerva MSB Bias

Side-channel leaks the top L bits of each nonce (k < 2^(256−L)). With ~256/L signatures the key is recovered by an LLL lattice reduction.

bitcoin
Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.
newest for the address (1 to 100,000 supported \u2014 a single TXID fetches just that one transaction; larger counts take longer to fetch and analyze)
Balance 0 BTC
Received 0 BTC
TX 0 
Instructions:\n1. Enter a Bitcoin TXID (64 hex) or an address.\n2. Signatures are tested across a ladder of leak sizes L (64..8).\n3. When enough signatures exist for a leak size, the LLL reduction recovers the key.
Educational / read-only tool. Transaction data is fetched live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback). R-reuse recovery only succeeds on wallets that already leaked their key on-chain through a faulty signer — it demonstrates why ECDSA nonce reuse is catastrophic. Never enter keys for wallets you use.