Regulations

Story: CryptoAssetRecovery’s Chris Brooks Flew for $53 Million and Returned Empty-Handed

By Pankaj K

1 / 15

What Crypto Recovery Actually Means. A lot of people don't really understand what recovery specialists do. It's not magic.

2 / 15

Trust Is the Hardest Part. Brooks' firm has handled over 3,000 wallets for around 1,500 clients.

3 / 15

Chris Brooks flew to Georgia for a shot at $53 million. He came home with nothing — not even his plane ticket covered.

4 / 15

Brooks runs CryptoAssetRecovery.com and has seen a lot of strange cases over the years. But the one involving a man named Rusty still stands out.

5 / 15

The meeting spot was a strip mall office. Not exactly the setting you'd expect for a nine-figure crypto handoff.

6 / 15

When they arrived, Rusty's group handed over notebooks stuffed with recovery seeds and pointed them at a series of wallets. Brooks worked through them.

7 / 15

A lot of people don't really understand what recovery specialists do. It's not magic. It's not pulling coins back out of a blockchain after they've been sent to the wrong address.

8 / 15

Most wallets use the BIP39 standard, which draws from a list of 2,048 possible words. If someone's missing two or three words from their seed phrase, specialists can run through…

9 / 15

ReWallet, another firm in the space, once cracked a 20-character password protecting $3 million in crypto.

10 / 15

More context: Standard Chartered Launches Spot Bitcoin and Ether Trading for Institutions in UAE

11 / 15

And there's a quirk that trips people up more than you'd think. Some wallets support passphrases — an extra layer of security on top of the seed phrase.

12 / 15

Brooks' firm has handled over 3,000 wallets for around 1,500 clients. They've cracked passwords in 63% of cases.

13 / 15

The industry's core tension is pretty uncomfortable: the information needed to recover a wallet is the same information that controls the wallet.

14 / 15

After the Rusty fiasco, Brooks changed how his firm operates. Crypto Asset Recovery now handles cases remotely and uses automated systems to process sensitive information.

15 / 15

See also: Thailands New Travel Rule Forces Crypto Operators to Verify Self-Custodial Wallets

The Currency Analytics

Want the full story?