Search key, WIF, mnemonic across 18 chains CtrlK

Ed25519 Nonce Reuse

Two Ed25519 signatures (same key, same R, different messages) → s = (S1 − S2)/(H1 − H2) mod L.

bitcoin
Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.
newest for the address (1 to 100,000 supported \u2014 a single TXID fetches just that one transaction; larger counts take longer to fetch and analyze)
Balance 0 BTC
Received 0 BTC
TX 0 
Instructions:\n1. Enter a Bitcoin TXID (64 hex) or an address.\n2. Every input\u2019s ECDSA signature (R, S, Z) is extracted and shown; R-reuse pairs recover the private key.\n3. Note: Ed25519 signatures are not present in Bitcoin transactions (they live on Solana, TON, XRP, Cardano...). The ECDSA R-reuse recovery below is fully working; Ed25519 explorer integration is not wired yet.
Educational / read-only tool. Transaction data is fetched live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback). R-reuse recovery only succeeds on wallets that already leaked their key on-chain through a faulty signer — it demonstrates why ECDSA nonce reuse is catastrophic. Never enter keys for wallets you use.