Joe Grand · Video summary
$75,000,000 Crypto Wallet Bulk Hack
Joe Grand developed a 3-year process to hack hardware crypto wallets, recovering over $75 million by exploiting chip vulnerabilities and brute-forcing PINs.
Watch on YouTube ↗Key takeaways
- 🚀Securely store your recovery seed and PIN in multiple, diverse locations (e.g., fireproof safe, encrypted digital storage, trusted family member) to mitigate loss risks.
- 💪The process of hacking hardware wallets is a meticulous and iterative one, requiring extensive research, experimentation, and refinement over years to achieve reliable, repeatable results with minimal risk.00:06
- 📚Many users lose access to their crypto due to simple mistakes like forgetting PINs, misplacing recovery seeds, or accidental data loss, underscoring the human element in digital asset security.02:23
- 💡The core of the "bulk hack" relies on exploiting hardware vulnerabilities in microcontrollers like the STM32F2, enabling a downgrade attack to bypass security measures.04:32
- 🎯Electromagnetic fault injection (EMFI) is a key technique, using power consumption analysis to trigger glitches that disrupt the chip's operation at specific moments, facilitating security bypasses.05:07
- 🔍Extracting encrypted data from the device involves a multi-stage process, including defeating security, exploiting bootloader vulnerabilities (like the STM32's read command), and performing multiple glitches to retrieve data chunks.06:35
Chapters
- 0:00🎯 Introduction and Background
- 2:50🎯 The Bulk Hack Process Explained
- 2:50🎯 Case Study: Shauna's Wallet
- 4:32🎯 Stage 1: Downgrade Attack
- 6:35🎯 Stage 2: Extract Encrypted Data and Retrieve PIN
- 14:08🎯 Wallet Recovery and Results
- 19:00🎯 Stories of Personal Loss and Redemption
- 27:02🎯 Cracking Other Devices and PINs
- 31:47🎯 The Keep Key Device Hack
- 35:40🎯 Reflections on the Work and Impact
- 36:14🎯 Future Outlook and Final Remarks
The digest
High Level Overview
This presentation chronicles a multi-year technical and emotional journey tackling the challenge of hacking hardware cryptocurrency wallets—specifically models using the STM32F2 microcontroller—when owners have lost PINs or recovery seeds. Over several years, the hacker refined a reliable bulk attack capable of decrypting wallets collectively worth an estimated $75 million. The work highlights the intersection of advanced hardware fault injection techniques, cryptographic vulnerability exploitation, and deeply personal stories of loss, hope, and recovery. It serves professionals interested in hardware security, cryptography, and digital asset recovery.
Keep reading in The Digest
The full 5-minute article, 10 more sections, and every new episode from Joe Grand and the creators you follow.
- Structured Deep Dive
- Background and Motivation
- Introduction to the Bulk Hack Process
- Practical Example: Shauna’s Wallet
- Emotional Context and Client Stories
- Bulk Client Cases and Results
- Technical Sophistication: Evolving Attack Techniques
- Key Framework: The Three-Stage Bulk Hack Process
- Practical Implications & Takeaways
- Action-Oriented Summary
