GPU and CPU. Extract-safe by design.
The compute tier routes both gaming GPUs and high-bandwidth CPUs onto wallet password recovery — without ever sending the wallet itself. Workers receive a ~40-byte verifier, run candidates against it, and report only matches.
Two device classes, two workload kinds.
Workload routing is automatic. The agent benchmarks your hardware on first run and only accepts jobs it can run efficiently.
Consumer GPUs
- ▸ NVIDIA RTX 30 / 40 / 50-series · 8 GB VRAM minimum
- ▸ AMD RDNA3 · reduced throughput supported
- ▸ Workloads: PBKDF2 (SHA-256/512), AES-CBC verifiers
- ▸ Linux, macOS, Windows with CUDA / OpenCL drivers
High-bandwidth CPUs
- ▸ Threadripper, EPYC, Xeon W, Core i9 · 64 GB RAM or more
- ▸ Workloads: scrypt, ROMix, memory-hard KDFs
- ▸ Wallets like Armory and Coinomi beat consumer GPUs on CPU
- ▸ Linux preferred; AVX2 / AVX-512 accelerated
Twelve wallet formats, all extract-safe.
Each of these formats has a BTCRecover-style extract: a tiny verifier that lets you test passwords without giving you anything that could move funds.
From customer wallet to fleet, end to end.
Extract-based recovery, end to end
The customer's wallet stays on Brute Brothers' isolated machine. We send the fleet a ~40-byte verifier — enough to test passwords, not enough to reconstruct keys.
Open-source extract scripts strip the wallet down to a verifier — header bytes or padding only. No seed material.
Distribrute slices the candidate keyspace into chunks and dispatches them to suitable workers by workload kind.
A worker that produces a match returns only the candidate. Brute Brothers settles with the customer and the participant earns a share.
Cryptographic property, plain language.
A worker can find the password but cannot unlock the wallet. The encrypted seed and private keys are not part of the payload.
What the worker handles
Just enough material to test passwords. Nothing else.
- IV (16 B)
- first ciphertext block (16 B)
- KDF params (iter, salt, n/r/p)
- candidate chunk indices
What stays on Brute Brothers
Everything required to actually move the funds.
- encrypted master key / seed
- encrypted private keys
- wallet addresses
- customer identity / PII
Compute-tier inventory.
| Case ID | Wallet | Value range | Scope | Workload | Tier | Status |
|---|---|---|---|---|---|---|
| BB-01147 | Bitcoin Core | $180k–$240k | 9–11 char password, mixed case + digits | GPU-optimal | compute | open |
| BB-01202 | Blockchain.com | $12k–$18k | 6–10 char password, dictionary-derived | GPU-optimal | compute | in progress |
| BB-01233 | MetaMask | $28k–$34k | 8–14 char password, leetspeak hints | GPU-optimal | compute | open |
| BB-01241 | Electrum 2.x | $64k–$82k | 10–12 char passphrase, two-word base | GPU-optimal | compute | in progress |
| BB-01267 | Armory | $96k–$118k | 10–12 char password, memory-hard KDF (ROMix) Memory-hard KDF — high-RAM CPU outperforms GPU. | CPU-optimal | compute | open |
| BB-01274 | mSIGNA | $22k–$30k | 10–13 char password, multisig co-signer recovery | GPU-optimal | compute | open |
| BB-01289 | Dogechain.info | $6k–$9k | 6–8 char password, pet-name family base | GPU-optimal | compute | in progress |
| BB-01301 | MultiBit Classic | $41k–$55k | 8–11 char password Lower-quality verifier — false positives possible at 1 in 3×10¹¹. Operator re-checks final candidates against full key file. | GPU-optimal | compute | open |
| BB-01344 | Coinomi | $14k–$22k | 9–11 char password, scrypt KDF Scrypt is memory-hard — CPU with high DDR bandwidth outperforms most consumer GPUs. | CPU-optimal | compute | open |
| BB-01357 | Bither | $11k–$16k | 7–9 char password, birth-year suffix | GPU-optimal | compute | open |
Get on the compute tier.
KYC + participant agreement, then your first job. Both GPUs and CPUs are eligible.