Crypto Asset Recovery cracks 63% of wallets, warns most have under $100

When Chris Brooks, chief executive of Crypto Asset Recovery, was first contacted by a client named Rusty in 2021, he was told an astonishing story. Rusty, along with two associates, claimed to have been awarded 5,000 Bitcoin in a legal settlement, an amount valued at approximately $53 million at that time.

High-stakes promise turns cold

Brooks and his son, Charlie, quickly arranged a Zoom call to discuss the opportunity. During the call, Rusty’s group displayed their phone, supposedly showing the Bitcoin. They said they had been able to withdraw up to $300,000 a week but wanted help to recover the entire sum. In exchange, they promised to make the Brookses millionaires if the recovery was successful.

Eager to assist, Brooks and his son traveled to Georgia the following day, meeting Rusty, a 6-foot-3 Army veteran, for lunch. Rusty then revealed the wallet contained more than just 5,000 Bitcoin. The group drove to a strip mall owned by one of the men, where Brooks and his son were handed notebooks filled with pages of potential recovery seeds. They spent the day examining wallets, but were unable to confirm whether any had ever actually held the claimed assets.

Brooks later became convinced that Rusty may have been deceived by scammers. The trip provided an important early lesson: not every lost crypto story is genuine, and sometimes the assets were never there at all.

Tokenized Stock

ETH

SOL

BSC

ROBINHOOD

PAY

USDT

↓

RECEIVE

AAPL

Find Best Price

Complex landscape of asset recovery

Brooks’s experience highlights the challenges facing wallet recovery specialists. A “lost wallet” may involve a forgotten password, misplaced wallet hardware, or missing recovery phrases. In many cases, the assets are not lost on the blockchain; rather, users have lost the means to access them.

Bruno Krauss, co-founder and chief technical officer of the recovery firm ReWallet, noted that Bitcoin’s BIP39 seed phrase standard uses a list of 2,048 words. If clients can remember most of their seed phrase, recovery firms can often reconstruct the missing pieces by systematically searching combinations. In one instance, ReWallet succeeded in recovering a 20-character password to unlock roughly $3 million in assets after reverse engineering a flawed password generator.

Technical approaches are sometimes only part of the solution. Krauss emphasized the importance of understanding client behavior, recalling a case where a client thought she had used her children’s names, only for it to be a local delivery service’s phone number.

Tom Bennet, a Bitcoin educator who has researched wallet security, pointed out the confusion created by passphrases. A passphrase layers additional security on top of a seed, so entering the correct seed with the wrong passphrase simply opens another valid wallet instead of generating an error message. This can leave users thinking their Bitcoin has disappeared when it has simply shifted addresses.

Mini dictionary: BIP39, also known as Bitcoin Improvement Proposal 39, is a standard used across many cryptocurrencies for generating mnemonic seed phrases. These phrases are typically 12 or 24 words from a list of 2,048 words and serve as the backup for a wallet’s private key, enabling wallet recovery if lost or damaged.

Physical device recovery presents its own hurdles. As long as the backup seed phrase remains intact, assets can usually be accessed via another device, regardless of hardware failure. If both the backup and the hardware are lost, recovery is impossible.

Krauss explained that outdated software, faulty password generators, corrupted files, or device vulnerabilities have occasionally made wallet recovery possible for clients who thought they were out of options. However, hardware wallet maker Trezor’s Bitcoin analyst, Lucien Bourdon, cautioned that if a wallet’s keys and backups are gone, no service can recover the lost funds.

Risks and warning signs in recovery

Security remains a foremost concern. Recovery specialists require sensitive information that provides access to assets, such as seed phrases or backup files. This creates inherent trust risks. Bourdon advised users to be suspicious of unsolicited offers of wallet recovery, especially those pushing for communication via WhatsApp or demanding upfront fees, and warned against anyone urging clients to open new exchange accounts.

Brooks observed that while some recovery firms may take a percentage of funds successfully recovered, advance payments should make clients wary of scams.

Security concerns have changed Brooks’s business practices. Crypto Asset Recovery no longer meets clients in person and now processes sensitive information remotely using automated and air-gapped systems—a measure designed to prevent both physical and online risks.

Despite the allure of multimillion-dollar recoveries, Brooks reported that about 71% of cracked wallets contain less than $100. The company waives recovery fees for assets under that value, reflecting the reality that most cases do not involve life-changing wealth.

For specialists, success rates and typical values remain modest: Crypto Asset Recovery says it has attempted to crack more than 3,000 wallets for approximately 1,500 people, with password recovery achieved in about 63% of cases.