Hey all,
I was looking into some P2PKH transactions and noticed that the nonce r seems to be reused across different public keys. It's kinda weird since all these addresses appear to have come from a cloned virtual machine.
Key points I found:
- Multiple transactions are using the same nonce r but different public keys.
- One address even reuses the same nonce with the same private key.
This raises some red flags about possible security risks. Anyone else noticed this?
Issues with Nonce Reuse in P2PKH Transactions
1 reply 261 views
Interesting find!
But if you think about it, it looks like we have some equations here with too many unknowns. Like, we can see s1 = k−1(e1 + r*d1) and s2 = k−1(e2 + r*d2).
Even if we know s1, s2, r, e1, and e2, we still can’t solve it because we’re missing k, d1, and d2. So reusing the nonce like this could expose the private key, but only in certain conditions. If you use the same ephemeral key (k), then yeah, you can end up with two equations that are solvable. Just food for thought!