FAQ

What is BruteFather?

BruteFather is a high-performance cryptocurrency address scanner written in Rust with 17 scan modes, GPU acceleration, and support for 11 blockchains.

How does the address database work?

BruteFather uses bloom filters and LMDB for address lookups. The database is not bundled — you load your own address files. Bloom filters provide O(1) lookups with minimal RAM usage, while LMDB enables on-disk verification.

What blockchains are supported?

BTC (P2PKH, P2WPKH, P2SH-P2WPKH, P2WSH, Taproot), ETH, BNB, LTC, DOGE, DASH, BCH, TRX, XRP, SOL, and NEAR — 11 blockchains total. Auto-withdrawal is supported for all networks.

How fast is the scanning?

CPU: ~1–1.5M keys/sec with adaptive batching. GPU (NVIDIA CUDA): up to 800M–2.5B keys/sec depending on mode and card. Distributed mode via Coordinator combines multiple machines.

What is the Coordinator?

BF-Coordinator is a centralized server that distributes key ranges among connected workers, collects statistics, stores found keys, and provides a live dashboard. Security is provided by HMAC-SHA256 authentication.

Is GPU required?

No, GPU is optional. BruteFather runs on CPU by default. It auto-detects NVIDIA CUDA GPUs for hardware acceleration, with OpenCL as a fallback for non-NVIDIA cards.

Why does VirusTotal show detections?

Some antivirus engines (3–5 out of 71) use ML-based heuristics that commonly flag Rust binaries performing cryptographic operations (secp256k1, SHA-256, AES) and dynamic GPU library loading (CUDA/OpenCL). These are false positives — the detections are labeled 'moderate confidence' or 'ml.score'. You can verify the source code yourself or submit a false positive report.

What scan modes are available?

16 modes: Random, Puzzle, WeakKeys, Mnemonic (Random/Sequential/Markov), Brain (SHA256/Keccak/Blake2b/Whirlpool + books), Phantom, Recovery (6 sub-modes), BIP38, Stdin, Minikeys, Hamming, and DiskScan. Kangaroo and Collision modes are also available internally.

What recovery tools are included?

6 recovery sub-modes: Seed phrase recovery (BIP39 with missing/wrong words), WIF key repair, RSZ/ECDSA nonce attack (5 attack types including LLL lattice), MetaMask vault decryption, SLIP39 Shamir secret sharing, and Armory paper backup recovery.

How do I set up the address database?

Download the pre-built bloom filter files from the Download page and place them into the data/db/ folder. On first launch BruteFather auto-detects supported database files. You can also build custom databases from your own TSV address lists via the built-in converter.

Is BruteFather free?

BruteFather is free for personal use. Pool participants share scanning results — the coordinator distributes key ranges and collects found keys. No subscriptions or time limits. All scan modes are fully unlocked.

How does auto-withdrawal work?

When BruteFather finds a funded address, it can automatically sweep the balance to your configured destination wallet. Supports BTC, ETH, BNB, LTC, DOGE, TRX, and other supported chains. Set your withdrawal addresses in the Settings tab.

What is the Pool and how do I join?

The Pool is a distributed scanning network where participants combine computing power. Log in via Telegram, download the scanner, enter your Coordinator credentials from the Download page, and start scanning. Your contribution and found keys are tracked in the Personal Cabinet.

Can I run BruteFather on Linux or macOS?

Currently BruteFather is Windows-only (x64). Linux support is planned for a future release. macOS is not supported due to lack of CUDA. You can run the Windows version via Wine/Proton on Linux (CPU-only mode).

How do I update to a new version?

Simply download the latest BruteFather.exe from the Download page and replace the old file. Your settings (scanner_config.json), databases, and found results are preserved — they are stored separately in the data/ folder.