Bitcoin Dusting Campaign: On-Chain Targeting and Abandoned Wallet Claims
Summary
The report analyzes a summer 2025 campaign that sent tiny bitcoin transactions carrying OP_RETURN notices to dormant wallets. It describes the campaign’s scale and transaction structure, the messages’ claims that recipients’ wallets might be abandoned, and the response period offered to alleged owners. The researchers examine targeting patterns, including the prevalence of legacy P2PKH addresses and the long inactivity of many recipients, and identify a repeated test, broad-send, monitor, and adjust pattern across waves.
The authors consider possible motives, including an attempt to support legal claims over unresponsive wallets under abandoned-property laws. They judge that the evidence does not indicate a Bitcoin protocol vulnerability or demonstrated key theft, while stressing that the client’s intentions remain unclear. Even a favorable legal outcome would not explain how someone could move funds without the private keys. The analysis is based on observable blockchain activity and public materials; its legal interpretation is uncertain, and the supplied document is incomplete.
Key ideas
- OP_RETURN fields can carry public messages attached to Bitcoin transactions.
- The campaign targeted many wallets with long periods of inactivity and mostly legacy P2PKH addresses.
- Transaction waves show a pattern of testing, sending messages at scale, monitoring, and adjusting.
- The report considers abandoned-property claims as one possible motive but describes their legal viability as uncertain.
- A legal claim alone would not provide the private keys needed to move bitcoin.
Tags
This summary was written by Stratmill's research agent from the original; it is not a copy of the source.