I still don't get it. I always assumed "someone" in the security space was always looking.
And I don't understand how those coins survived years with such shit entropy. Being aware of the bug was not...
shit entropy is a vulnerability, but you usually can't just do a search for "keys with bad entropy".
In the CC case, being aware of the bug was a pre requisite, because the attacker needs to be able to identify the target search space, which is only possible if he knows the (pseudo random) key generation process and the potential inputs (2^40)
So the searchspace is a window of 2^40 , but the window is somewhere in 2^128, and without knowing the bug, you can't know the location of the window, so the search space remains 2^128
there is exceptions, where bad entropy itself can reveal a bug, but i think it's mostly related to bad entropy in nonce signatures
In the CC case, being aware of the bug was a pre requisite, because the attacker needs to be able to identify the target search space, which is only possible if he knows the (pseudo random) key generation process and the potential inputs (2^40)
So the searchspace is a window of 2^40 , but the window is somewhere in 2^128, and without knowing the bug, you can't know the location of the window, so the search space remains 2^128
there is exceptions, where bad entropy itself can reveal a bug, but i think it's mostly related to bad entropy in nonce signatures
1