![](https://steemitimages.com/640x0/https://cdn.steemitimages.com/DQmfCiXudoK9MaLXeaUu1CiYXnL4fmCiSLgoeXFF7eCm1BW/image.png)
In this article that I published a few days ago I announced that I found and turned in 44 compromised private keys.
Today I finished scanning the STEEM Blockchain (the remaining 30 million blocks) and these are the results:
![](https://steemitimages.com/640x0/https://cdn.steemitimages.com/DQmYmkCPnddcDqNBhA1McVWyHJVBZ7uyuwC3E4MAKktR4tx/image.png)
- - 1x PRIVATE ACTIVE KEY.
- - 55x PRIVATE POSTING KEYS.
- - 13x PRIVATE MEMO KEYS.
One of the private posting keys belongs to a user that leaked his key years ago and is still active. They have almost...
10 K Steem Power
- 9,695.373 STEEM POWER
- 165.304 STEEM
- $9.845 SBD
Estimated Account Value: $1,933.81
Most of the other accounts are fully inactive and have nearly nothing but some instead have a few thousand SP, others more than 2 thousand followers, reputation up to 70, savings up to 600 STEEM, etc.
![](https://steemitimages.com/640x0/https://cdn.steemitimages.com/DQmQkZ2CPY6HSj9ZvAkzdZZRFjDsSZVR4DLwh6axVL4zcXX/image.png)
An interesting aspect of these findings is that the private active key that my blockchain scanner detected was compromised by his owner in an account_update operation (eg. updating the link to his website or his location on their Steemit profile). That is very uncommon as most of the accidental leaks occurred in transfer/comment/post operations.
Having my bot not limiting its private keys detection to the latter operations has proven itself as a good idea! ; )
As I did the last time, I just sent all these private keys to @guiltyparties (IMO one of the most reputable Steemit Witnesses) and I am going to notify all these users through wallet transfers, telling them that they compromised their accounts and need to reset them asap using their master key or password. PS. Done!
Some additional stats collected after my whole scanning activity:
Total private keys found and turned in: 123
Sum of all compromised accounts' Steem Power: 26,277.857
- Excluding liquid STEEM and SBD
- With today's (low) price of STEEM the sum of their 100% upvotes would be $ 0.21 / $ 30 a month (+ downvotes re-use on platform abusers?)Sum of all compromised accounts' followers: 27,832
Note: accounts with compromised private Memo keys are excluded from the calculation of the total funds and followers.
UPDATE on my STEEM blockchain scanner that will keep scanning new operations published into the STEEM blockchain in order to prevent the leak of new keys: ((long phrase, take a breath! XD ))
![](https://steemitimages.com/640x0/https://cdn.steemitimages.com/DQmVb61VJ8RZHviAiGZsTVJV84PmPzWQ9jHSgmhchhFguLd/image.png)
One important additional feature that I am going to add (besides the ones mentioned in my previous post): the bot is going to monitor those compromised inactive accounts and if they ever start getting abused, I'm going to burn all their Resource Credits upvoting burn posts so that no one else will be able to use them.
![](https://steemitimages.com/640x0/https://cdn.steemitimages.com/DQmYpsYQHfTufTknJp7bCz7y4RgPTzDw2b1oPCjhkFphmYo/image.png)
I will start doing so only on detection of abuse of the dead accounts though. Otherwise if the rightful owner ever comes back to the platform, they likely won't be able to reset their keys or notify their return due to the lack of RC.
ayyyyyy, that's pretty impressive.
and commendable. Maybe one day you can show us the scanner in action?
I love overdosing on data
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Once I'm done with the development I can post screenshots or a video. Or even some raw json extracts from the results. I will publish all the status updates on this blog.
I won't share the code for security reasons though. The risk is that black hats could try and race my bot.
The tech stack is currently the following: nodeJs, Docker, RabbitMQ, (Cloud services).
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
With every spam or phishing thing I hear about I think "But noone here would be so stupid or negligent!" - only to realize afterwards that yes, such things can happen to the most improbable people. Don't ask me why. Doing such things too late in the evening? Being distracted by Steemmonsters? It happens to the best of us ;)
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Wow great job in finding those Keys. The accounts could call themself lucky that you are one of the good actors here on Steem. Otherwise they would have lost all their funds.
Posted using Partiko Android
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Well, only the compromised active keys allows for transfers and luckily those accounts didn't have much in their wallet.
The risk comes from an attacker using the posting keys to mass upvote or downvote some users (eg. SDL).
My bot will will keep scanning new operations published into STEEM blockchain in order to save (almost) at runtime compromised keys (including owner keys). It will also keep an eye on those known compromised accounts in order to make them unusable if they get abused.
Thanks, take care. =]
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Wow. Kudos!
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
!giphy bow
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
giphy is supported by witness untersatz!
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Awesome work!
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
!giphy thanks :)
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
giphy is supported by witness untersatz!
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Good job! :)
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Thx =]
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
You do very useful activity for the platform.
!DERANGED
!COFFEEA
!shop
$trdo
!BEER
for you
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Thx @eii =]
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Sorry, out of BEER, please retry later...
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Thanka for the informtion... Yiu are doing a good work for thw community...
Thanks
!trdo
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
!giphy superman
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
giphy is supported by witness untersatz!
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
你好鸭,gaottantacinque!
@eii给您叫了一份外卖!
由 @wongshiying 老王 迎着台风 开着巴士 给您送来
![](https://steemitimages.com/0x0/https://dailysmscollection.org/wp-content/uploads/2018/08/happy-new-year-2019-gif-funny-.gif)
新年快乐!
吃饱了吗?跟我猜拳吧! 石头,剪刀,布~
如果您对我的服务满意,请不要吝啬您的点赞~
@onepagex
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
@tipu curate ;)
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit
Upvoted 👌 (Mana: 5/10 - need recharge?)
Downvoting a post can decrease pending rewards and make it less visible. Common reasons:
Submit