<p>The vulnerability affects the encryption of the wallet file, weakening the encryption by lowering the resources needed to brute force attack it. </p>

<p>Practically, this means if an attacker were to get a copy of your wallet.dat file, they would have an easier time brute force attacking it (ie. guessing your password would become a little easier), compared to an attack against a wallet.dat file using the same password, that is not affected by the vulnerability. </p>

<p>Any attack that exploits this vulnerability would have to be highly targeted, so for affected users the threat of attack is probably quite low. Perhaps ironically, by asking for help, you may draw attention to yourself as an affected user,  <strong>so I would be very wary of anyone offering a 'tool' to help you fix the issue!</strong> </p>

<p>I assume that your goal here is simply to ensure your bitcoins are secure. If you are concerned that someone may steal (of have already stolen) your encrypted wallet.dat file, a simple fix would be to create a new wallet using software of your choice, and then send the entire balance of the old wallet to the new one. This way, your new wallet file will not be affected by the vulnerability.</p>

CC BY-SA 4.0
2018-12-11T22:29:57.983Z
Hey, I altered the question. I don't remember my passphrase and thought it is helps to find it much faster due to vulnerability.
bitlobo
CC BY-SA 4.0
2018-12-11T22:45:23.403Z
Ah okay, that changes the scope of the question substantially. Note that in general, it is against site rules to offer a reward for help. I do hope you are able to recover your wallet!
chytrik
CC BY-SA 4.0
2018-12-11T22:21:57.570Z
2018-12-11T22:21:57.570Z
chytrik
<p>Own a wallet.dat file from 2010-2011. Yesterday I saw there was a vulnerability which is makes attacking somewhat easier if your wallet is generated by old client and I'm pretty sure my wallet is affected that vulnerability because my last transaction is made 2010.</p>

<p>So my problem is I don't have any idea about wallet passphrase. Maybe the vulnerability helps to open my wallet. It is about AES padded encryption. But i don't have enough cryptographic knowledge to handle it. I'm aware it is brute force task but the vulnerability decreases time of task.</p>

<p>I hope that someone can create a brute force tool for me which is using the vulnerability, so that I can recover my wallet.</p>

<p>Github Report about vulnerability : <a href="https://github.com/bitcoin/bitcoin/commit/c682cdf3eda0f55297eb0e72a04508b7b9c2f5df" rel="nofollow noreferrer">https://github.com/bitcoin/bitcoin/commit/c682cdf3eda0f55297eb0e72a04508b7b9c2f5df</a></p>

<p>VulDB report : <a href="https://vuldb.com/?id.4883" rel="nofollow noreferrer">https://vuldb.com/?id.4883</a></p>

<wallet><wallet-recovery><cryptography>
Bitcoin Core Old Wallet.dat Vulnerability
bitlobo
# Bitcoin Core Old Wallet.dat Vulnerability

(Asked by: username_0 on 2018-12-11)

Own a wallet.dat file from 2010-2011. Yesterday I saw there was a vulnerability which is makes attacking somewhat easier if your wallet is generated by old client and I'm pretty sure my wallet is affected that vulnerability because my last transaction is made 2010.

So my problem is I don't have any idea about wallet passphrase. Maybe the vulnerability helps to open my wallet. It is about AES padded encryption. But i don't have enough cryptographic knowledge to handle it. I'm aware it is brute force task but the vulnerability decreases time of task.

I hope that someone can create a brute force tool for me which is using the vulnerability, so that I can recover my wallet.

Github Report about vulnerability : <https://github.com/bitcoin/bitcoin/commit/c682cdf3eda0f55297eb0e72a04508b7b9c2f5df>

VulDB report : <https://vuldb.com/?id.4883>

**Tags:** wallet, wallet-recovery, cryptography


---

## 1 answers

### Answer by username_1 on 2018-12-11. Score: 1

The vulnerability affects the encryption of the wallet file, weakening the encryption by lowering the resources needed to brute force attack it.

Practically, this means if an attacker were to get a copy of your wallet.dat file, they would have an easier time brute force attacking it (ie. guessing your password would become a little easier), compared to an attack against a wallet.dat file using the same password, that is not affected by the vulnerability.

Any attack that exploits this vulnerability would have to be highly targeted, so for affected users the threat of attack is probably quite low. Perhaps ironically, by asking for help, you may draw attention to yourself as an affected user, **so I would be very wary of anyone offering a 'tool' to help you fix the issue!**

I assume that your goal here is simply to ensure your bitcoins are secure. If you are concerned that someone may steal (of have already stolen) your encrypted wallet.dat file, a simple fix would be to create a new wallet using software of your choice, and then send the entire balance of the old wallet to the new one. This way, your new wallet file will not be affected by the vulnerability.

> **Comments:**
> **username_0**: Hey, I altered the question. I don't remember my passphrase and thought it is helps to find it much faster due to vulnerability.  
> **username_1**: Ah okay, that changes the scope of the question substantially. Note that in general, it is against site rules to offer a reward for help. I do hope you are able to recover your wallet!  

---

