We specialize in recovering access to Ethereum wallets using advanced cryptographic methods. Here’s what we offer:
1. Decrypting Ethereum JSON Files
- Problem Solved: Forgotten password for your JSON wallet file (e.g., MyEtherWallet, GETH, MIST).
- Technical Process:
- Web3 Secret Storage V3 keystores use AES-128-CTR with scrypt or PBKDF2; the KDF and parameters must be read from the file. Original presale
encseedwallets use a different format, described below. - We use optimized GPU/CPU clusters to brute-force or dictionary-attack the password, leveraging any clues you provide (e.g., partial passwords, keyword hints).
- Web3 Secret Storage V3 keystores use AES-128-CTR with scrypt or PBKDF2; the KDF and parameters must be read from the file. Original presale
- Supported Formats: UTC/JSON files from MyEtherWallet, MIST, GETH, and ETH presale wallets.
2. Ethereum Presale Wallet Recovery
- Problem Solved: Lost passwords for 2014 ETH presale wallets.
- Technical Process:
- Original presale wallets use PBKDF2-HMAC-SHA256 with 2,000 iterations and the password as the salt. The first 16 derived bytes are the AES-128-CBC key; the first 16 bytes of encseed are the IV. Recovery feasibility depends on password strength and available clues.
- After decrypting the seed and removing PKCS7 padding, the private key is derived from the seed and checked against the recorded Ethereum address. See the go-ethereum presale implementation.
3. Corrupted ETH JSON File Repair
- Problem Solved: Wallet files damaged by incomplete saves, disk errors, or improper edits.
- Technical Process:
- Analyze hex/JSON structure to salvage encrypted keys or repair formatting errors.
- Preserve surviving ciphertext and encryption parameters, then assess whether decryption is possible. Missing encrypted seed bytes cannot be reconstructed from a public address alone.
4. Private Key Extraction
- Recover: Private keys from software wallets (MetaMask, Exodus) or hardware wallets (Trezor, Ledger) via:
- Seed Phrases: Rebuild BIP39 mnemonics (12/24 words) and derive keys using BIP32/BIP44 paths.
- Exodus seed.seco Files: Decrypt backups using password-cracking methods.
Supported Wallets & Technical Specs
We work with most major Ethereum wallets:
| Wallet | File/Backup Type | Encryption Standard |
|---|---|---|
| MyEtherWallet | JSON (AES-128-CTR) | scrypt (N=8192, r=8, p=1) |
| ETH Presale Wallets | JSON encseed (AES-128-CBC) | PBKDF2-HMAC-SHA256 (2,000 iterations) |
| MetaMask | V3 Encrypted JSON | PBKDF2-SHA256 + AES-256-GCM |
| Trezor/Ledger | 12/24-word BIP39 Seed | BIP39 Mnemonic + Optional Passphrase |
| Exodus | seed.seco (Encrypted JSON) | AES-256 + PBKDF2 (100k iterations) |
Technical Deep Dive
- Brute-Force Attacks:
- GPU/CPU testing is tailored to the actual encryption and KDF parameters. Candidate rates vary substantially by wallet format and hardware.
- Seed Phrase Recovery:
- BIP39 mnemonics with checksums allow combinatorial recovery of missing/incorrect words.
- Corruption Repair:
- Manual hex editing or script-based parsing to reconstruct valid JSON/encrypted payloads.