Skip to content

BuilderWorld Playground

Satoshi Guesser

Bitcoin Wallet Collider · BTC Private Key Collider · Satoshi Wallet Collider

A pure client-side Bitcoin wallet collider. Each pull of the lever generates a random 256-bit number locally in your browser, treats it as a Bitcoin private key, derives the corresponding address, and checks it against the ~22,000 wallet addresses publicly attributed to Satoshi Nakamoto. Odds: 1 in 5.27 × 10⁷² — mathematically impossible, but cryptographically non-zero.

Jackpot

1,097,702 BTC

≈ $83.68B

Odds

1 / 5.27 × 10⁷²

per spin

Known addresses

21,954

Patoshi pattern + genesis block

How it works

All cryptography runs inside your browser. Nothing leaves the page. Step by step:

  1. Generate 32 random bytes (= 256 bits) using the browser's native crypto.getRandomValues(), treat as a candidate Bitcoin private key.
  2. Derive the corresponding public key via secp256k1 elliptic curve, then compute the address hash (hash160 = SHA-256 then RIPEMD-160).
  3. Probe the hash160 against a Bloom filter. If Bloom says no, discard immediately (~99.9999999% of pulls).
  4. On a Bloom hit, confirm with a sorted-lookup table to rule out false positives. Only a real match triggers the win modal.

How impossible the odds actually are

Translating the abstract 5.27 × 10⁷² into something graspable:

  • A laptop benches around 2,142 spins per second.
  • At that rate, expected time to a single hit: ~7.8 × 10⁶¹ years.
  • The universe has only existed for ~1.4 × 10¹⁰ years since the Big Bang.
  • If every human alive (8 billion) had been spinning continuously since the Big Bang, we'd still be 10⁴² spins short of one expected hit.
  • The Sun engulfing Earth (~5 billion years from now) would have to happen 10⁵² times before you'd statistically land one.

FAQ

▸Does this actually check real Bitcoin private keys?

Yes. Every pull does a full secp256k1 derivation and checks the resulting address against the 21,954 addresses publicly attributed to Satoshi. If a hit ever occurred, the WIF shown would be a valid Bitcoin private key able to sweep that wallet.

▸How low are the odds, exactly?

1 in 5.27 × 10⁷² per spin. To put that in perspective: every human alive (8 billion) spinning continuously since the Big Bang would still be 10⁴² spins short of a single expected hit. Practically zero — but cryptographically non-zero.

▸Why 21,954 addresses, not more?

These are early-mining block-reward addresses identified by the Patoshi pattern, plus the genesis block, plus a small number of other addresses publicly attributed to Satoshi by long-term on-chain analysis. Almost all hold round-50-BTC balances and have never moved.

▸How can I prove there's no backdoor?

Open DevTools (F12) → Network tab → pull the lever → you'll see zero outbound requests. The entire computation runs inside the JavaScript runtime; even analytics doesn't fire. Static assets (Bloom filter + address table) load once on first visit.

▸How is the private key generated? Random enough?

We use the browser's built-in crypto.getRandomValues() — the W3C Web Crypto API's cryptographically-secure random source, implemented by every modern browser. 32 bytes used directly as the private key. Same entropy quality hardware wallets use.

▸Does anything I see or generate get sent to a server?

No. No server processes private keys here. BuilderWorld's backend only handles your account / subscription / comments — the game itself is a pure client-side application. There isn't even a backend endpoint to leak to.

▸What happens if I actually hit?

Autospin auto-stops so the next pull can't overwrite the result. A non-dismissable modal pops up with the full WIF private key, the matched Satoshi address, the recoverable balance, and a 4-step recovery guide: copy WIF → write on paper + photo backup → import to Electrum or Bitcoin Core → build a sweep transaction to a new address you control.

▸How would I actually retrieve the funds if I won?

Copy the WIF. Electrum is the standard tool for sweeping a raw WIF — Wallet → Private Keys → Sweep → paste WIF → it builds a sweep transaction sending the full balance to whatever new address you specify. Bitcoin Core works the same way if you run a full node.

▸Why build this game?

Educational. Combining the concrete physical action of pulling a lever with the impossible numbers makes secp256k1 + SHA-256 brute-force resistance viscerally tangible — which is why Bitcoin, Ethereum, and any chain using the same primitives stay secure in the pre-quantum era.

▸Can I share this with friends?

Please do. The hook content (jackpot stat, odds, preview-win modal) is visible without signing in; actually pulling the lever requires email sign-in.

We use cookies

Anonymous analytics help us improve the site. You can opt out anytime. Learn more