nowfound

Life & fun · October 24, 2026

Steal My Bitcoin

A PHP security challenge. Find the hidden bitcoin key. First person to get the wallet wins.

Steal My Bitcoin launched on October 24, 2026 with 433 votes, #9 of 3,726 launches that month and more than 99% of that year's launches.

In plain words

Steal My Bitcoin is a PHP security challenge that tasks participants with finding a hidden bitcoin key worth approximately $500 stored on a vulnerable server. Players must exploit security weaknesses in an older PHP version to access the wallet through the print-flag binary. The first person to successfully retrieve the key wins the cryptocurrency. The challenge is designed for security enthusiasts and penetration testers interested in practicing real-world exploitation techniques on a deliberately vulnerable system.

written from the facts on this page · October 2026

From the sources

There is a bitcoin key hidden on this server worth about $500 . It is accessible to the PHP user account through the print-flag binary. This PHP version was selected from before the PHP2SHELL CVEs were released. First person to get the wallet wins. If you don’t need the money, consider donating it to those who do: givewell.org . All traffic is logged. This is a known vulnerable machine, so we cannot guarantee privacy. Other attackers may access or monitor activity and data beyond our control. Do not submit anything you want to keepfrom stealmybitcoin.com

Does a similar job

all alternatives →
  • Bitcoin Challenge. Try to steal a plain text private key you can use2025 · app.redactsure.com · ▲14

    Hi HN, I'm releasing my round one public demo of a new browser security system I've been developing. There's a real Bitcoin private key (worth $20) in plaintext at app.redactsure.com. You can copy it, paste it, delete it, move it around - full control. But you can't see the actual characters or extract them. The challenge: Break the protection and take the Bitcoin. First person wins, challenge ends. Details: - Requires email verification (prevents abuse, no account needed) - 15 minute time limit per session - Currently US only for the demo (latency) - Verify the Bitcoin is real:…

  • I built a puzzle / programming challenge with a 0.125 BTC prize2018 · formapi.io · ▲48

    Fill out and generate PDFs with a simple API request. Design templates in our drag-and-drop editor, POST your JSON data, and download a finished PDF in seconds.

  • SA
    Satoshi9000 analog BTC key generator (mechanical)2024 · ▲164

    I built this machine so I could generate Bitcoin keys that I could trust. Air-gapped and simple to use and understand (mechanical). The Satoshi 9000 demo: https://youtu.be/bJiOia5PoGE The key value proposition of the machine is that it generates analog randomness in the physical world and converts it into digital (1’s and 0’s) randomness. Seamlessly. But it occurs to me that it may have other uses beyond crypto keys for your own use, such as: * Randomized clinical trials. Clinical trials need a high degree of transparency for ethical reasons; also, for legal reasons should it…

  • ST
    Server Thief Bait – catch people in places they shouldn't be2019 · serverthiefbait.com · ▲23

    Get a baited crypto wallet so you know if someones broken into your computer or server.

  • Backslash2014 · ▲84

    The easiest way to send and receive Bitcoin

  • Free Bitcoin2019 · freebitco.in · ▲26

    A way to win free Bitcoins every hour!

More life & fun this month

the category →

Launched alongside, October 2026

the whole month →