Fiyasko's Forgotten Passphrase: Mining Savings Lost to Single Point of Failure (2012)
IndeterminateWallet passphrase was unavailable — whether access was ultimately recovered is not known.
In December 2012, a Bitcoin miner operating under the username Fiyasko (also known as JackRabiit) created a dedicated savings wallet to store one month of accumulated mining income—approximately 10% of monthly mining yields. The wallet was established deliberately ahead of the block reward halving scheduled for 28 November 2012, when block rewards would drop from 50 BTC to 25 BTC. Over the course of one month, Fiyasko transferred funds into this segregated wallet, then forgot the passphrase protecting it. Despite multiple manual attempts to recover the password through trial-and-error variation, the user could not regain access.
On 1 December 2012, Fiyasko posted on the Bitcoin Technical Support forum requesting recovery assistance and offered a 1 BTC bounty for a user-friendly guide to running a passphrase brute-force script. In follow-up posts, Fiyasko clarified that they theoretically knew the password but had exhausted all variations they could remember. Community members directed the user to existing passphrase recovery scripts from earlier threads—particularly one referenced by Stephen Gornick—and suggested hiring a specialist (user 'rix') to execute the brute-force attack. The thread does not reveal whether Fiyasko ultimately recovered the funds, the exact BTC amount in the locked wallet, or the final outcome.
This incident exemplifies a fundamental vulnerability in early self-custody practices: single points of failure when passphrases are neither securely recorded nor reliably memorized. Brute-force recovery tools existed in 2012, but their success depended on password complexity and how completely the user remembered portions of it.
| Stress condition | Passphrase unavailable |
| Custody system | Software wallet |
| Outcome | Indeterminate |
| Documentation | Partial |
| Year observed | 2012 |
| Country | unknown |
Why passphrases fail years after they are set
The failure mode documented consistently across observed cases is temporal: the passphrase is set with confidence, not used for an extended period, and then cannot be reproduced exactly when needed. A single character difference — different capitalization, an added space, a slightly different special character — produces a different wallet with a zero balance. The holder may be certain they remember the passphrase while being unable to produce the exact string that was originally set.
What makes this particularly difficult is that there is no signal at the moment of failure. A wrong passphrase does not produce an error message. It opens an empty wallet. The holder sees a zero balance and typically concludes the passphrase was wrong — but without knowing which part was wrong, or by how much.
Professional passphrase recovery services can attempt permutations when the holder has partial information: they remember the general structure, typical patterns they use for passwords, the approximate length, or that it included a specific word. Recovery from total non-recollection is not feasible.
The preventive action is to store a passphrase record — not with the seed phrase, which would defeat its security purpose, but in a separate secure location accessible to the holder and potentially a designated recovery person. A passphrase that exists only in memory has a time horizon: it will eventually be forgotten, and the timing is unpredictable.
Translate