Search key, WIF, mnemonic across 18 chains CtrlK

Profanity Vanity Weak Keys

Profanity (2018) generated Ethereum vanity addresses from a single 32-bit seed — every private key it produced was just d = seed + offset, where the offset counts attempts within the batch. That is exactly what attackers brute-forced in the $115M Wintermute hack (keyhunt's profanity mode). This tool models that collapse with the same equation: Verify a seed + offset to see the key and addresses, or scan a seed × offset rectangle to recover the key behind a target address on the selected chain. Every hit is verified by regenerating the address. Everything runs in your browser.

ethereum
Paste a wallet address for the selected chain and brute-force the modeled d = seed + offset rectangle below (both address formats for base58 chains are tried).
to · offset 0 to the full Profanity space is 2^32 seeds (a GPU job); this browser demo scans a bounded rectangle — try 0–4095 × 0–31 first
+ derives d = seed + offset and the addresses (instant)
Scope: this models the class of failure behind the Profanity vulnerability — a 32-bit seed where every key is d = seed + offset — exactly the structure keyhunt brute-forced for Wintermute. The recovered key is a normal secp256k1 key, so once found it also derives addresses for every other secp256k1 chain. It recovers any key generated under this model. 
Instructions:
1. Verify a seed + offset — type a seed and an offset (e.g. 1337 + 0) and press "Verify pair" to derive d = seed + offset, the private key, and the addresses for the selected chain instantly.
2. Scan a rectangle — paste a wallet address for the selected chain, set a seed range and max offset, and press "Scan range". The key is recovered if the address was generated under the modeled Profanity collapse (d = seed + offset).
3. A key is shown only when it regenerates the target address, so a match is verified, not guessed.
4. The full Profanity space is 2^32 seeds — too large for a browser in one go; scan bounded seed × offset rectangles.
5. No internet needed — all secp256k1 and hashing runs in your browser.
Educational tool — models a vulnerability class. This reproduces the effect of the Profanity vanity-address vulnerability (the class behind the $115M Wintermute hack): every generated private key is d = seed + offset from a 32-bit seed, exhaustively brute-forcible. It recovers any key generated under this model. Every recovered key is verified by regenerating the address; nothing is guessed. Never enter keys for wallets you use.