Defcon Speaker Discusses Liberating $300K Worth of Bitcoin From an Encrypted File – Bitcoin News


Defcon Speaker Discusses Liberating $300K Worth of Bitcoin From an Encrypted File

This year due to the coronavirus outbreak the world-famous hackers’ convention Defcon held it’s 28th annual event with virtual presentations in “safe mode.” One of the presentations was from an executive from Pyrofex, Michael Stay, who discussed how he broke into an encrypted file to liberate $300,000 worth of bitcoin for a Russian investor.

Defcon 28 “safe mode” presentations got interesting on August 5, when ex-Google employee Mike Stay told a story about how he rescued $300k worth of bitcoin (BTC) from an encrypted zip file.

Stay is the CTO of Pyrofex Corp, a blockchain development firm that launched in 2016. During a speech last Wednesday, May told the story of how he was contacted not too long ago, so he could help someone retrieve their crypto assets.

“About six months ago, a Russian guy contacted me on Linkedin with an intriguing offer,” May said on Youtube. “He had hundreds of thousands of dollars in Bitcoin keys locked in a zip file, and he couldn’t remember the password. Could I break into it for him?”

The story Stay told was quite intriguing, as the anonymous Russian investor wanted access to the bitcoins worth roughly $300,000. Stay said the anonymous client found his name when he stumbled upon an old cryptanalysis paper he wrote 20 years ago.

Defcon Speaker Discusses Liberating $300K Worth of Bitcoin From an Encrypted File

The cryptographer also explained that the Russian purchased all the coins in 2016 for around $10k. However, the investor put the bitcoin into an encrypted zip file and after some time passed, he forgot his password.

“In that attack, I needed five files to break into a zip archive,” Stay recalled. “This one only had two files in it. Was it possible? How much would it cost? We had to modify my old attack with some new cryptanalytic techniques and rent a GPU farm, but we pulled it off.”

According to the cryptographer it cost him around $7k to pull off the attack against the encrypted zip file. Stay said that he also had help from the CEO of Pyrofex Nash Foster who is also an ex-Google employee. Stay detailed that he built his own program to try different password techniques and at first the job was very difficult.

The Pyrofex CTO stated that at first the Russian investor was leery of trusting Stay, and he wouldn’t divulge too much information. Stay said the entire process could have taken a very long time and even months to accomplish. However, with the help of Foster, Stay said the operation was executed in days.

The story is interesting because there is likely a great number of people who have lost bitcoins via an encrypted file and forgot the password. With digital assets growing more valuable every day, it’s likely that individuals who think they have lost coins, may still attempt to retrieve them with help from an expert.

A study from Chainalysis in 2018 suggests that a fifth or 20% of all bitcoins that exist can potentially never be recovered or are considered lost. Coin Metrics published a study in 2019 that said “assumed lost coins” was around 1.5 million BTC.

Tags in this story
$300K bitcoin, Coronavirus, cryptanalytic techniques, Defcon 28, Defcon 28 “safe mode”, encrypted file, Lost Coins, Michael Stay, Nash Foster, program, Pyrofex CTO, Russian Investor, trust, Zip File

What do you think about Mike Stay’s story about retrieving $300k in bitcoin from an encrypted file? Let us know what you think about this story in the comments below.

Jamie Redman

Jamie Redman is the News Lead at News and a financial tech journalist living in Florida. Redman has been an active member of the cryptocurrency community since 2011. He has a passion for Bitcoin, open-source code, and decentralized applications. Since September 2015, Redman has written more than 6,000 articles for News about the disruptive protocols emerging today.

Image Credits: Shutterstock, Pixabay, Wiki Commons, Defcon, Youtube,

Disclaimer: This article is for informational purposes only. It is not a direct offer or solicitation of an offer to buy or sell, or a recommendation or endorsement of any products, services, or companies. does not provide investment, tax, legal, or accounting advice. Neither the company nor the author is responsible, directly or indirectly, for any damage or loss caused or alleged to be caused by or in connection with the use of or reliance on any content, goods or services mentioned in this article.

Read disclaimer
Show comments