
Ghosted Wallet Recovery
Core, Blockchain, Electrum, Multibit, Ethereum, Trezor, Seed Phrase and many more. At your service...
How does it work?How does it work?
- There are two types of wallet recovery: Encrypted Wallet Recovery and Seed Phrase Recovery
-
Encrypted Wallet Recovery: These kind of wallets are in file format, like wallet.dat core wallets, Blockchain, Electrum, Multibit wallets etc. We will recover the password to unlock the wallet.
But how? Well, we have dozens of supercomputers which can guess billions of passwords per second according to your wallet file. We will run specific softwares (Hashcat mostly) on your wallet files to recover the password with these computers.
To do that, we simply need: The wallet file, clues about password if you remember any and that's it.
Important Note: The wallet to recover has to be a REAL wallet, not a fake wallet that is publicly available or for sale on internet. We will not work with these wallets since they are impossible to recover.
-
Seed Phrase Recovery: Let's say you had a seed phrase, but somehow you lost/forgot some of the words of it. We will try some methods to find the missing words and recover your funds.
But again... How? Well, for BIP39 list (most of the wallets are BIP39) there are 2048 words. So your seed phrase is being generated with that list. Let's say you forgot two words of the seed phrase, 2048 times 2048 is ~4 million possible seed phrases, which is a tiny amount for automated computers. Our computers will generate these seed phrases one by one and then they will check if any of these seed phrases is connected to your wallet address.
To do that, we simply need: The application used to generate the wallet, the words you remember (in order), your lost wallet address and any additional information that would help us.
- The recovery may take hours, days, weeks or even months according to the information you give us. If we manage to recover your wallet, we will take 10% of the total balance, otherwise zero fee.
If you want to learn more about the process or if you want to try recovery by yourself, check this guide.
How can you trust us?
- With your wallet file and seed phrase, we could access all your funds, right? So that means we can get all the funds inside and disappear. (We will not of course)
- Here is our answer for this:
- Well this is correct. The answer to 'how to trust us' is that we do our business on Telegram, which is NOT very anonymous anymore. Even if we do something like that, you can easily track us down by getting in contact with Telegram support. We would not take that risk.
Plus, if you are here you probably already tried everything you could to recover your wallet but all failed so you already consider that money is gone. Even if we took your funds, you would not lose anything since you already lost your funds before.Finally, we have the same trust issue too. Let's say we recover a wallet without receiving the wallet file, we crack the password by spending time & power (which costs money), the owner unlocks the wallet and disappears without giving us our share. That does not just waste our time, but waste our money too.
Get in Touch
Ready to recover your wallet? Reach out to us via Telegram:
Contact us on Telegram @ghostedhereBasic guide for recovery.
- Here is a detailed guide about the process. This can help you if you want to try recovery yourself or just wondering how does it actually work.
- Hashcat Recovery for Encrypted Wallets:
- First of all, if you are going to recover an encrypted wallet, you need a TON of GPU power. CPU's are not efficient for password cracking, so you need a ton of powerful GPU, like several RTX 5090s.
Assuming you have enough GPU power, you need to download Hashcat, - the fastest password cracker in the World - it should work for you except some other wallet types. Hashcat supports most of them but not all.
Currently Hashcat supports all these wallets:
▸ MetaMask Wallet
▸ BitShares v0.x
▸ Bitcoin/Litecoin (and more) wallet.dat
▸ Bitcoin WIF private key
▸ Electrum Wallet
▸ Blockchain, My Wallet
▸ Stargazer Stellar Wallet XLM
▸ Ethereum Wallet
▸ MultiBit Classic
▸ MultiBit HD
▸ Exodus Desktop Wallet
▸ Terra Station Wallet
Assuming your wallet is here. After setting up Hashcat, you want to install John the Ripper to extract your wallet hash, which is encrypted version of your password. Read their documentation to learn how to do that.Note for John the Ripper: Most of the time you want to run bitcoin2john, multibit2john etc. instead of running john to crack the hash. Use JTR to extract the hash, not to crack them. Hashcat performs better than JTR.Example hash format (-m 11300 for Hashcat): $bitcoin$64$3c5085b7e8af3b6dc420c2a1c007d0dd01afcb55e7bf89bd17aa3a768c78400c$16$1cbb31e65d66a99a$191557$2$00$2$00Now let's say you extracted the hash and will start the attack. First of all, most of the time you do not need brute force attacks, they will take thousands of years. Instead if you have no clues about the password, download a big wordlist with billions of passwords like Rockyou2024 (150 GB) and run it.If you have any clues about the password, you want to use combinator attacks, rules, hybrid attacks etc. These are quite advanced, you can check Hashcat FAQ and Hashcat forum for more help.Here are some Hashcat .rule files we use and suggest:
OneRuleToRuleThemAll.rule, line count 52k.
SNAP.rule, line count 304k, it is a combination of multiple rules.
Unic0rn28 ruleset, there are smaller and bigger .rule files in this ruleset, you can use any of them according to your needs.Important note for rules: For larger wordlists or slower hashes, you dont want to use big rules like SNAP.rule, since it would take a lot of time to complete the attack. Instead use smaller yet effective rules. - Alternative Recovery for Encrypted Wallets & Seed Phrase Recovery:
- Hashcat does not support all wallets. Eg. Trezor, Ledger, Armory etc. You need to use alternative tools if thats your case.
We suggest gurnec's btcrecover and 3rdIteration's btcrecover. Gurnec's is quite outdated, but supports some old wallets that 3rdIteration version does not, for example Armory. You can use any of these according to your case, and yes they support GPU so you still need some GPU power.With these tools you dont need to use John the Ripper to extract hash, they will handle the hashes themselves.The rest is similar with Hashcat, no brute force if you dont have thousands of years to wait. There are some differences on how to use though, unlike Hashcat they don't have advanced attack types. Read their documentation for more help. Gurnec's tutorial, 3rdIteration's tutorial.Here is an important note: Both versions of btcrecover supports seed phrase recovery. If your seed phrase is partially lost, you can still recover your wallet. For 3rdIteration's btcrecover, seed phrase recovery without your wallet address is still possible but you need an addresses database which makes things a bit more complicated, so it is better if you have the wallet address. Check their documentation for more details.
- After Recovery...
- If you manage to recover a relatively old encrypted wallet, there is an easy way to extract your private keys, instead of downloading the wallet software, syncing etc. And that is: prof7bit's wallet tool.
What makes it simpler and easier?Most of the old wallet softwares are too buggy or too hard to install nowadays. That one single tool can handle core (bitcoin), multibit, blockchain and android wallets at once. Making it way more easier.If your wallet is not that old like Electrum, Metamask, Exodus etc. you can just import the wallet file to wallet software and use the cracked password to access your funds.If you did recover a seed phrase instead, you can simply import your seed phrase to a lightweight multichain wallet like Trust Wallet, Metamask, Exodus etc.
- A last important note: Please note that without any GPU power, you are most likely going to fail.
- Currently the best performing GPU for wallet recovery is RTX 5090, followed by RTX 4090. If you are serious with recovery, you'll need several of these GPUs, one wont be enough most of the time.
How to get some GPU power?You have to directly buy them and build your own supercomputer which will cost a lot, or rent one which will still cost a lot. If you prefer renting, we suggest vast.ai since they are the best with pricing and customer service.And again, please note that both of the options are going to cost you some money. So if you have no money to invest, your attempts are most likely going to fail.Why is it so important?GPUs are the best option for wallet recovery. Best ones can guess billions of password per second according to the algorithm used. Even the worst GPUs nowadays performs better than the best CPUs when it comes to wallet recovery. They are designed to be like that. If you have a great GPU power it will save you thousands of years.Here is a Hashcat benchmark list that can help you understand better GPU power. A benchmark is simply how many password guesses a device can make per second. Please note that some algorithms are harder to solve, which means will have lower guesses per second.
- If all of these are too complicated for you...