Search key, WIF, mnemonic across 18 chains CtrlK

Shared Nonce Across Chains

Paste a Bitcoin address (or a transaction ID) to extract each input's ECDSA signature components — R, S, Z — then index every signature by its R value across all wallets and chains. Two signatures that share the same R were made with the same nonce k: one solvable collision pins k, and that single leaked nonce then recovers the private key of every wallet that signed with it. Each recovered key is verified against the on-chain public key. Everything runs in your browser.

bitcoin
Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.
newest for the address (exactly this many are scanned; a single TXID fetches just that one transaction)
Every signature is indexed by R and any shared nonce is attacked across wallets and chains — no parameters needed.
Balance 0 BTC
Received 0 BTC
TX 0 
Instructions:
1. Enter a Bitcoin address (recommended) or a 64-character TXID.
2. Every signature is indexed by its R value across all keys and chains. When one R is shared, the nonce k is pinned from a solvable collision and propagated to every signature that reused it.
3. A private key is shown only when it regenerates the on-chain public key, so there are no false positives. Recovery needs at least one shared R (nonce reuse) to bootstrap.
4. An internet connection is required to fetch transaction data from public block explorers.
Educational / read-only tool. Transaction data is fetched live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback). Key recovery only succeeds when a nonce (R) is reused across signatures — even across different wallets or chains — and it demonstrates why sharing a single ECDSA nonce is catastrophic. Every result is verified against the on-chain public key; nothing is guessed. Never enter keys for wallets you use.