<p>My guess is that you are using weak passphrases to generate your keys. This is a common mistake with brain wallets. It is well known that there are bots that scan the blockchain for any unspent coins contained in an address generated from a weak passphrase and takes it for itself. I've not heard of a bot that looks at multisig p2sh addresses for weak passphrases, but I'm not surprised that it exists. It's not that much different than looking for weak passphrases in a standard pay to pub key transaction. </p>

<p>The reason why I think this is the case is because your coins get taken from the multisig address after you've made one transaction from the multisig address. When you make a transaction from the multisig address, you reveal all the public keys that the multisig address is associated with. If the passphrase associated with the key is weak, the private key can be cracked by the bots and your coins will be gone. </p>

<p>If your coins were taken before you've made a transaction from the multisig address, this could mean that your computer or the brainwallet generator is compromised. It is also possible that there is a bot that can crack a p2sh multisig address without knowing the public keys (this is doable but since the search space is bigger it would be harder for the bot).  But since this is not the case, it seems pretty clear that you are using weak passphrases to generate your keys. </p>

CC BY-SA 3.0
2014-12-01T20:43:27.913Z
>>>I've not heard of a bot that looks at multisig p2sh addresses for weak passphrases<<< OK, now you have heard about it :)
amaclin
CC BY-SA 3.0
2014-12-02T08:13:51.713Z
That should be the case since I was playing around with small amounts. Thanks!
blockbyblock
CC BY-SA 3.0
2014-12-01T17:42:05.413Z
2014-12-01T18:03:40.340Z
2014-12-01T18:03:40.340Z
k kurokawa
<p>After generating a 2-out-of-3 wallet (using brainwallet <a href="http://ms-brainwallet.org/#generator" rel="nofollow">http://ms-brainwallet.org/#generator</a>) I am able to store my private/public keys for each of the participants. </p>

<p>Afterwards I send a small amount of BTC to this address (0.0002). The amount is correctly recorded and confirmed in the blockchain and is listed as an unspent transaction. </p>

<p>Afterwards I create a new transaction that spends (0.0001 BTC). This transaction is successful. On the third step I sent more funds to the 2-out-of-3 wallet (0.0003). This is where the issue happens: any funds I deposit in this wallet from second transaction on are automatically spent towards various unknown addresses, and there is never any unspent transactions no matter how much I deposit there.</p>

<p>I have tested this with several wallets already. </p>

<p>What I am thinking of is that there is a change problem. I found <a href="http://bitzuma.com/posts/five-ways-to-lose-money-with-bitcoin-change-addresses/" rel="nofollow">some ways that funds can 'evaporate'</a> but I haven't been able to nail the issue completely. Any inputs would be appreciated.</p>

CC BY-SA 3.0
2014-11-30T02:04:54.567Z
I'm not sure I understand what's going on from your description. Could you give the multisignature address, or draw a diagram?
Nick ODell
CC BY-SA 3.0
2014-11-30T07:28:10.807Z
Is it 32sQKWebFMMdgmvfyJsUz8Fxbi4HJJaqcf?
amaclin
CC BY-SA 3.0
2014-11-30T21:11:40.707Z
You either made a mistake in crafting the multisig transaction, or your private key is compromised somehow (brain wallets in general are just a bad idea). As others have stated, it would help if you post the multisig address in question.
k kurokawa
CC BY-SA 3.0
2014-11-30T21:42:12.083Z
Yes its 32sQKWebFMMdgmvfyJsUz8Fxbi4HJJaqcf
blockbyblock
<multi-signature>
Unspent outputs get spent automatically
blockbyblock
# Unspent outputs get spent automatically

(Asked by: username_0 on 2014-11-30)

After generating a 2-out-of-3 wallet (using brainwallet <http://ms-brainwallet.org/#generator>) I am able to store my private/public keys for each of the participants.

Afterwards I send a small amount of BTC to this address (0.0002). The amount is correctly recorded and confirmed in the blockchain and is listed as an unspent transaction.

Afterwards I create a new transaction that spends (0.0001 BTC). This transaction is successful. On the third step I sent more funds to the 2-out-of-3 wallet (0.0003). This is where the issue happens: any funds I deposit in this wallet from second transaction on are automatically spent towards various unknown addresses, and there is never any unspent transactions no matter how much I deposit there.

I have tested this with several wallets already.

What I am thinking of is that there is a change problem. I found [some ways that funds can 'evaporate'](http://bitzuma.com/posts/five-ways-to-lose-money-with-bitcoin-change-addresses/) but I haven't been able to nail the issue completely. Any inputs would be appreciated.

**Tags:** multi-signature

> **Comments:**
> **username_1**: I'm not sure I understand what's going on from your description. Could you give the multisignature address, or draw a diagram?  
> **username_2**: Is it 32sQKWebFMMdgmvfyJsUz8Fxbi4HJJaqcf?  
> **username_3**: You either made a mistake in crafting the multisig transaction, or your private key is compromised somehow (brain wallets in general are just a bad idea). As others have stated, it would help if you post the multisig address in question.  
> **username_0**: Yes its 32sQKWebFMMdgmvfyJsUz8Fxbi4HJJaqcf  

---

## 1 answers

### Answer by username_3 on 2014-12-01. Score: 4 | Accepted answer

My guess is that you are using weak passphrases to generate your keys. This is a common mistake with brain wallets. It is well known that there are bots that scan the blockchain for any unspent coins contained in an address generated from a weak passphrase and takes it for itself. I've not heard of a bot that looks at multisig p2sh addresses for weak passphrases, but I'm not surprised that it exists. It's not that much different than looking for weak passphrases in a standard pay to pub key transaction.

The reason why I think this is the case is because your coins get taken from the multisig address after you've made one transaction from the multisig address. When you make a transaction from the multisig address, you reveal all the public keys that the multisig address is associated with. If the passphrase associated with the key is weak, the private key can be cracked by the bots and your coins will be gone.

If your coins were taken before you've made a transaction from the multisig address, this could mean that your computer or the brainwallet generator is compromised. It is also possible that there is a bot that can crack a p2sh multisig address without knowing the public keys (this is doable but since the search space is bigger it would be harder for the bot). But since this is not the case, it seems pretty clear that you are using weak passphrases to generate your keys.

> **Comments:**
> **username_2**: >>>I've not heard of a bot that looks at multisig p2sh addresses for weak passphrases<<< OK, now you have heard about it :)  
> **username_0**: That should be the case since I was playing around with small amounts. Thanks!  

---

