Address Bit Leaked Check

Paste a Bitcoin address (or a transaction ID) to extract each input's ECDSA signature components — R, S, Z — then test every signing key for a leaked nonce. When enough of a key's signatures leak bits in the MSB or LSB, the private key is recovered by lattice reduction (Hidden Number Problem + LLL) and verified against the on-chain public key. Everything runs in your browser.

bitcoin
Enter a Bitcoin address or a 64-character transaction ID (TXID). Balance and stats load for every chain; the transaction graph loads where a keyless explorer is available.
newest for the address (exactly this many are scanned; a single TXID fetches just that one transaction)
Balance 0 BTC
Received 0 BTC
TX 0 
Instructions:
1. Enter a Bitcoin address (recommended) or a 64-character TXID.
2. Signatures are grouped by public key, then each key is tested for leaked nonce bits (MSB and LSB) using lattice reduction (Hidden Number Problem + LLL).
3. A private key is shown only when it regenerates the on-chain public key, so there are no false positives. Detecting a leak needs several signatures from the same key.
4. An internet connection is required to fetch transaction data from public block explorers.
Educational / read-only tool. Transaction data is fetched live from public block-explorer APIs (blockstream.info, with blockchain.info as a fallback). Key recovery only succeeds on wallets whose signer already leaked nonce bits on-chain — it demonstrates why biased or partially-leaked ECDSA nonces are catastrophic. Every result is verified against the on-chain public key; nothing is guessed. Never enter keys for wallets you use.