Demonstration of the GLV endomorphism and invalid‑curve attacks with private‑key recovery via the Chinese Remainder Theorem

This paper provides a deep analysis of the cryptographic properties of the  secp256k1 elliptic curve used in the Bitcoin protocol. We examine in detail the theoretical foundations of supersingular curves, the Frobenius trace, the embedding degree, and the MOV-reduction attack. We demonstrate the presence of effective GLV endoformism, where the curve is resistant to the main structural attacks (MOV,…

Structural anomalies of base points in secpXXXk1 elliptic curves: Bitcoin cryptanalysis and practical modeling in Google Colab

In this article, as a cryptanalysis of Bitcoin, we will analyze a computational scientific experiment that reproduces and extends the observation of John Zweng (2025) regarding the generator points Gof the Koblitz curve family SEC 2 — secp160k1, secp192k1, secp224k1 и secp256k1. A discovered pattern: for all Kobitz curves of prime order in the family, SEC 2 (secp160k1, secp192k1, secp224k1, secp256k1)the point obtained…

RAMnesia Attack: A Scientific Investigation of WireTap Threats to Bitcoin Infrastructure, Hardware Vulnerabilities (CVE-2025-6202, CVE-2023-39910), and Cryptanalytic Methods for ECDSA Key Recovery

This research presents a comprehensive analysis of two critical classes of attacks on the hardware memory of modern computer systems using DDR5 memory:  Phoenix Rowhammer Attack (CVE-2025-6202)  and  RAMnesia Attack (CVE-2023-39910) . Both attacks demonstrate fundamental vulnerabilities in the processing and storage of cryptographic material, creating unprecedented compromise vectors for recovering Bitcoin wallet private keys. The research integrates the results of…

Chronoforge Attack: An Analysis of an ARM TrustZone Vulnerability — From Microsecond-Level Leakage to Full Compromise of Bitcoin Wallet Private Keys

This research paper presents a comprehensive analysis of the critical  Chronoforge Attack vulnerability  —a class of timing side-channel attacks capable of completely compromising ECDSA (secp256k1) cryptographic operations when improperly implemented on Nordic nRF52/nRF53 microcontrollers with ARM TrustZone architecture. The study demonstrates the theoretical and practical feasibility of targeted Bitcoin private key extraction and recovery of compromised wallets by exploiting…

Phantom Curve Attack: How the Pollard–Kangaroo Algorithm Exposes Private Keys of Lost Bitcoin Wallets via Low-Entropy Nonces under Exponential Degradation of the Secret Key Parameter “K”

This paper provides a comprehensive cryptanalysis of the  Dark Skippy attack , a specialized implementation of a fundamental vulnerability in the Elliptic Curve Digital Signature Algorithm (ECDSA) —a  nonce reuse attack , also known as  the Phantom Curve Attack . This vulnerability exploits the weak entropy of the k (nonce) parameter   during the signing process of cryptographic transactions, leading to the complete compromise of Bitcoin wallet users'…

Shadow Key Attack: a fundamental threat of nonce leakage in Bitcoin transactions from the EUCLEAK mechanism via side channels of the Extended Euclidean Algorithm in YubiKey 5 devices and Infineon microcontrollers

This paper presents a cryptanalytic study  of the Shadow Key Attack  , a Bitcoin private key recovery method that exploits a critical vulnerability in the Elliptic Curve Digital Signature Algorithm (ECDSA) when an ephemeral random number  (k ) (nonce) is reused or leaked. The study reveals a deep connection between the Shadow Key Attack and the  EUCLEAK mechanism  (CVE-2024-45678) , discovered by NinjaLab researchers in YubiKey…

Phantom Signature Attack: An Analysis of the Critical Vulnerability CVE-2025-29774 in the Bitcoin Protocol, SIGHASH_SINGLE Implementation Flaws, and the Mathematical Framework for Private Key Recovery in Lost Cryptocurrency Wallets Enabling Unrestricted Control over BTC Assets

This research paper presents a comprehensive cryptanalytic study of critical vulnerabilities in the Bitcoin protocol's digital signature implementation, namely  the Phantom Signature Attack  (CVE-2025-29774) and the fundamental  SIGHASH_SINGLE processing error . The study demonstrates that incorrect processing of cryptographic primitives in the transaction signature mechanism creates the conditions for the complete compromise of cryptocurrency wallet owners' private keys without their knowledge.…

RingSide Replay Attack: Recovering the SEED → deriving Bitcoin wallet private keys and how 32-bit entropy instead of 256-bit led to the systematic compromise of crypto-asset funds

This paper presents a comprehensive cryptanalytic review of the critical vulnerability  CVE-2023-39910 , codenamed  "Milk Sad ," discovered in the widely used  Libbitcoin Explorer utility versions 3.0.0–3.6.0. The fundamental flaw lies in the use of a cryptographically insecure Mersenne Twister-32 (MT19937)  pseudorandom number generator  initialized by the system time, which catastrophically limits the entropy space to  32 bits  instead of the required 256 bits. The paper thoroughly…

Scalar Venom Attack: A critical HSM initialization vulnerability (CVE-2025-60013) enables private Bitcoin wallet key recovery through buffer overflow exploitation and shell metacharacters in the F5OS-A FIPS security module

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules (HSMs) when handling elliptic curve private keys. The study focuses on a class of attacks that exploit insufficiently isolated RAM management in certified cryptographic devices. In the modern Bitcoin cryptographic ecosystem,…

Pixnapping Attack: Compromising private keys and seed phrases through vulnerability CVE-2025-48561 represents a new critical threat to the Bitcoin network and Android infrastructure

This article examines the evolution of security threats in the cryptocurrency storage space, focusing on modern methods for compromising private keys and seed phrases, which secure digital wallets. The modern cryptocurrency ecosystem faces a growing threat of cyberattacks aimed at compromising private keys and seed phrases, which are the foundation of digital wallet security. The complexity and…