BitcoinTalk Bounty: $10,000 Offered for Forgotten Wallet Password Recovery
IndeterminateWallet passphrase was unavailable — whether access was ultimately recovered is not known.
In April 2022, a BitcoinTalk forum user posting as 'walletrecovery' published a bounty thread offering $10,000 to anyone who could help recover a Bitcoin wallet protected by a forgotten password created in March 2015. The user provided specific constraints: the password began with the letters 'Ca', was at least 10 characters long, and had been created manually rather than generated by a password manager or tool. Rather than attempt computationally expensive brute-force attacks, the user adopted a dictionary-based strategy, hypothesizing that if the password had ever been compromised in a data breach between 2015 and 2022, it would appear in compiled leaked password collections available through sites like weakpass.com.
The user recruited volunteer participants to process large password dictionary files (ranging from 57 GB compressed to 484 MB uncompressed) using command-line utilities including grep, gzip, 7zip, and hashcat to filter candidate passwords matching the known criteria. By April 4, 2022, at least two volunteers—LoyceV and PawGo—had begun actively processing dictionaries, with LoyceV extracting approximately 38 million candidate passwords starting with 'Ca' and 8–20 characters in length from the 'all_in_one' dictionary. The user structured the bounty as $10,000 for the volunteer whose dictionary contained the correct password, with additional $3,000 payments to up to three other participants for their contributions. The publicly visible thread content focuses on technical methodology, deduplication approaches, and coordination logistics among volunteers.
Critically, neither the amount of Bitcoin held in the wallet, the specific wallet software or hardware type, nor the ultimate recovery outcome is documented in the accessible thread record.
| Stress condition | Passphrase unavailable |
| Custody system | Unknown custody system |
| Outcome | Indeterminate |
| Documentation | Partial |
| Year observed | 2022 |
Why passphrases fail years after they are set
The failure mode documented consistently across observed cases is temporal: the passphrase is set with confidence, not used for an extended period, and then cannot be reproduced exactly when needed. A single character difference — different capitalization, an added space, a slightly different special character — produces a different wallet with a zero balance. The holder may be certain they remember the passphrase while being unable to produce the exact string that was originally set.
What makes this particularly difficult is that there is no signal at the moment of failure. A wrong passphrase does not produce an error message. It opens an empty wallet. The holder sees a zero balance and typically concludes the passphrase was wrong — but without knowing which part was wrong, or by how much.
Professional passphrase recovery services can attempt permutations when the holder has partial information: they remember the general structure, typical patterns they use for passwords, the approximate length, or that it included a specific word. Recovery from total non-recollection is not feasible.
The preventive action is to store a passphrase record — not with the seed phrase, which would defeat its security purpose, but in a separate secure location accessible to the holder and potentially a designated recovery person. A passphrase that exists only in memory has a time horizon: it will eventually be forgotten, and the timing is unpredictable.
Translate