Doomsday Explorer

Anti‑Scanner TRNG Audit Tool – Bitcoin, open‑source, white‑hat.

View code on GitHub Check out presentation

⇒Official Page

BitcoinTalk (project discussion) BitcoinTalk ("replay noise" attack)

Doomsday Ecosystem 🌿:

Mg-Peers

Yaqui Search

⚡️ Quick Overview

What

A PoC audit framework that shows how low‑entropy / predictable TRNGs can compromise Bitcoin wallets. Ready to use as a minimalistic preliminary audit tool.

Why

“Analog noise is NOT secure random”, competetive digital enumeration **is** secure random. The project demonstrates a real‑world attack surface that many RNG specs hide. And introduces an efficient mitigation approach.

It also aims at independent, public and practical verification, if not de-mystification, of NIST claims about security of their standards...with a powerful incentivized computational peer-to-peer network.

How

`npm install` → download address dump → `node ingest.js` → `node enumerate.js replica_name`.

Ledger Nano Deterministic Replica reproduces the source of entropy and the rest of the TRNG pipeline:

∀ 🌈spectra🌈 _{(greedy exhaustive search)}. `avalanche noise (first power-on)` → `SHA-256` → `entropy seed` → `thermal noise` → `phase-diff + XOR-fold + SHA256` → `wallet seed`.

→ Entropy Explorer Protocol mitigates the risk of attacker running this dangerous non-invasive algorithm in an attempt to remotely steal funds.

📽️ Demo & Screenshots

^ what _AI admits...in response to _childish ^inqury ^

^ Dashboard ^

^ Clock is ticking... ^

🚀 Getting Started

# 1️⃣ Clone the repo
git clone https://github.com/dk14/crypto.git
cd crypto/chats/btc-audit

# 2️⃣ Install dependencies
npm ci                # reproducible install

# 3️⃣ Pull the latest address dump (≈ 600 k addresses)
curl -L https://addresses.loyce.club/addresses.zip -o addresses.zip
unzip addresses.zip -d .

# 4️⃣ Populate the local DB
node ingest.js

# 5️⃣ Run a test enumeration (choose one source)
node enumerate.js ledger   # Ledger‑seed brute‑force
node enumerate.js urandom  # /dev/urandom scan
node enumerate.js clock    # Clock‑drift demo

Tip: add --verbose for detailed logs or --dry-run for a quick sanity check.

🔎 Running the Audits

Command	Description	Search space
`node enumerate.js ledger`	Enumerates actually possible seeds derived from a Ledger hardware wallet TRNG.	small (millions to billions)
`node enumerate.js urandom`	Scans for wallets that used `/dev/urandom` directly as a private key.	small (millions to billions)
`node enumerate.js clock`	Reconstructs keys generated from system‑clock entropy (e.g., `time()%2^32`).	tiny (millions)

Outputs: found.json (compromised addresses + private keys) and report.md (ready‑to‑publish disclosure).

Note: the audit tool deliberately expands the search space to simulate attacks, thereby avoiding any real‑world exploitation while the Explorer Network is still under development

🔎 Explorer Protocol

Decentralized. Peer-to-Peer.

Early warning defense system

Entropy Explorer Network architecture:

Data-submission format for entropy miners:


`seeds, blockchain_id, replica_id, worker_id, worker_id_pow, reward_address, version, signature`.

 - seeds is list of seeds you uncovered with your algorithm
 - worker_id is YOUR pubkey 
 - some reasonable worker_id_pow (SHA-256, CPU is enough) is recommended for Sybil-resistance, 
   - it is over your pubkey simply: `<pubkey>+<magicNo>` - where magicNo is PoW (SHA256),
 - replica_id is 0 for ledger, 1 for trezor, up to 42 - reserved, others - arbitrary 
 - blockchain_id is 0 for BTC, version is 0. 
 - JSON format. Signature is over minified JSON with signature field absent
 - reward_address is where u get ur incentives

 (`worker_id` serves as a basis for work replication an distribution)

 (work replication ensures no one is hiding seeds)

 IPFS --metadata "project:ExplorerBTCAudit"
 









Got your own private tool joining protocol?

Guidelines for ^{white-hat converts}:

 - don't overload IPFS pinning services 
  - you have to filter seeds based on metrics developed here (bitmatch as a starter).
 - CHECK that seeds don't belong to funded addresses. 
  - If they do - submit address (NO seed, no secret) in an issue here, on GitHub.

Notes: 

 - IPFS will become replaced in favor of gossip.
 - More fields (eg sampled entropy) will be added.

Explorer Node UI:

💰 Funding & Revenue‑Distribution

Fund any arbitrary BTC

Funding allows to build and maintain high-quality software for The Explorer Network to protect everyone's treasures, identities and existence personnelle en L’univers!

bc1qekvmkczge3hxrvwdf2lj3yyvgjnparn3fdf9lg

Continue

Instant inclusion in the Explorer Network "profit‑share" ledger.

(revenue comes from network fees on compute rewards and other computationally intensive services, to auto-reward contributors)

Paypal-Donate to R&D <- 💳 

𝄃𝄃𝄂𝄂𝄀𝄁𝄃𝄂𝄂𝄃 or, scan the bitcoin QR code with a mobile device 𝄃𝄃𝄂𝄂𝄀𝄁𝄃𝄂𝄂𝄃

Bid on a Feature

Send a signed TXID + description – your feature is prioritized and you get a larger revenue slice. Bids are listed in CONTRIBUTORS.md.

Sponsor a Compute Node

Earn a “Node‑Sponsor” badge and a share of fees for all audits run on your hardware.

Inquire (Node-Sponsor status requires over 0.1 BTC investment)

Early bird

Earn bonuses and extra profit‑share for investing early

+ Get BRC-20 and Lightning assets proportionally to donations (~Q4 2026), with extra benefits for early investors!!11

Profit‑sharing logic lives in profit-sharing.js: well-designed de-centralized minimalistic consensus-driven reward protocol (instead of smart-contract).
Assets in issue-assets.js (classic, adventurous). Feel free to audit, fork or improve it.

🛣️ Roadmap & How To Contribute

Milestone	ETA	Description
v1.1	Q3 2026	Explorer UI. Tool integration into Explorer protocol
v1.2	Q4 2026	Ledger replica. Ledger firmware integration for risk reporting
v1.3	Q1 2027	Full “Explorer Network” – decentralized marketplace of auditors.
v2.0	Q2 2027	Other replicas (Trezor, Apple Secure Enclave, military TRNGs). Audits for public SSL certificates

Would like to contribute?

- Code alternative `Explorer Network` clients and entropy mining software.
- Code `doomsday-web` (support and communication networks backbone for mining network) clients with AI. Code Mg-Peers clients to build data and trading markets around.

Fund participation

- Mirror this website with accordance to Mirror Network guidelines (for machines and human operators). Mirror in your pages, channels, documents and posts in absense of your own domain.

Fund participation

talented creativity

this website

~~Cross-authority~~

Participate in the fund – any amount pushes the roadmap forward. Bid on the features - to prioritize preferred features in the root "Doomsday (Entropy) Explorer" project (this one).

Embed your digital identity into the digital lineage (graph) of the project, by creating a connected txid for your collection (use the bitcoin address/wallet representing yours or your endeavor's l’identification; make tx - it becomes NFT with IRL backing unlike the most).

Project follows proven Bitcoin (aka Satoshi) development model with improvements, designed to maximize independency from author(s), while avoiding fragmentation of activities. Core specifications of Explorer Network are kept "publish the seeds" minimalistic (for cross-coherence), the rest is covered by specific designs for reference implementations in README. In some cases, bilateral multi-sig MAD-contracts with author(s) are approproate, e.g. for producing extra content for this doomsday portal.

All contributors and spendings (transparent fund tracking) are listed in CONTRIBUTORS.md. Fund contributors automatically receive a share of future revenues.

📜 Authentication

Message: "Doomsday Explorer Project for Bitcoin: https://github.com/dk14/crypto/tree/main/chats/btc-audit"

Address: bc1qekvmkczge3hxrvwdf2lj3yyvgjnparn3fdf9lg

Signature: IHdq/tIQtQeimfF92NOyOOdz2/iq2YR6qjD8vLgHWK3GGGETKX76L0e4Tvgtb1fOHrbLiW87QYIuOdCKYbSvmpA=

📜 License & Disclaimer

License – MIT (see LICENSE file).

Disclaimer – This tool is for **educational, research and white‑hat security auditing only**. Misuse to steal funds is illegal and will be prosecuted. The author disclaims any liability for damages caused by misuse.