Pre-alpha · 2026-05-09

Phoenix — recover the unrecoverable.

Open-source forensic recovery for crypto wallets where partial information still exists. No promises for the impossible. No magic. Just the toolchain artisan recovery shops have always used, finally productized.

Cognitive Interview Forensic Imports BIP-39 Reconstruct Passphrase Brute Hashcat Builder mbox Scanner

Tests passing

Sprint tags

72ms

1-word recovery

3.1s

2-word recovery

100%

Local-only

Honest framing

What Phoenix is

Local desktop tool — nothing leaves your machine
AI cognitive interview that extracts memory hints
Forensic file scanner (CSV / Chrome / mbox / text)
BIP-39 reconstruction with onchain verification
Passphrase brute-force for the forgotten 25th word
Open-source. Auditable. Reproducible builds.

What Phoenix is NOT

Not a recovery promise. 12 words gone with zero info = impossible. Period.
Not "AI wallet recovery" magic. Forensic and guided.
Not a cloud service. Your seeds never leave your device.
Not a hardware-glitch tool. Hardware PINs are out of scope.
Not 90% success. Realistic ceiling is 35-50% in the partial-info segment.

Recovery in 72 milliseconds — verified

Standard BIP-39 test vector. 11 known words, 12th unknown, target ETH address known. Phoenix brute-forces all 2048 candidates in parallel, filters checksum-valid, derives the address, matches.

↓ Run this on your terminal

$ phoenix reconstruct \
    --template "abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon ?" \
    --target  "0x9858effd232b4033e47d90003d41ec34ecaeda94" \
    --kind    eth \
    --index-range 1

✓ Recovered word: about
  Address index : 0
  Mnemonic      : abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about
  Elapsed       : 72.12ms

Six-layer architecture

L1 Cognitive Excavation 50-question Fisher-Geiselman bank · LLM extractor · multi-agent debate Done

L2 Digital Forensic Excavator BIP-39 text · Bitwarden CSV · Chrome history · mbox · KeePass kdbx ⏳ · OCR ⏳ Partial

L3 Constraint Inference Bayesian + CSP + HMM + per-user PassGPT fine-tune Roadmap

L4 Distributed Cracking hashcat / seedcat orchestration · custom CUDA kernels · cloud GPU offload Builder ready

L5 Verification & Restoration BIP-39 ↔ BIP-32 ↔ secp256k1 · BTC P2WPKH bech32 · ETH keccak256 · 1+2 missing word brute · passphrase brute Done

L6 Federated Learning Loop Differential privacy · federated averaging · cross-recovery model improvement Roadmap

Sprint status

Sprint	Output	Tag	Status
Hafta 1	Foundation (Tauri + Rust + React + CI)	`week-1-foundation`	Done
Hafta 2	Cognitive Interview MVP	`week-2-cognitive-interview`	Done
Hafta 3	Forensic Layer A	`week-3-forensic-a`	Done
Hafta 4+6	Multi-word + passphrase + Hashcat + mbox + threat model v1	`week-4-6-extended`	Done
Hafta 5	Cryptographic Core	`week-5-crypto-reconstruct`	Done
Hafta 7	First real pilot recovery	—	Blocked: needs real users
Hafta 8	Trail of Bits audit · public launch	—	Blocked: needs funding

How to run it on your machine

Phoenix is a desktop app. Three commands:

# 1. clone + build the workspace
cd C:\Users\enesa\phoenix
cargo build --workspace

# 2. quick sanity check
cargo run -p phoenix-cli -- doctor
cargo run -p phoenix-cli -- ollama-check --model qwen3:14b

# 3. launch the desktop app
cd src-tauri
cargo tauri dev

The app opens with five routes: Welcome · Interview · Reconstruct · Import · Settings. Try the Reconstruct route with the test vector above to confirm everything works.

What happens next

Things I (Claude) cannot do alone

Find real pilot users — Reddit/CT outreach uses your accounts
Sign Trail of Bits audit ($50–200k) contract
Open the GitHub remote · ProductHunt · HN launch posts
Negotiate KYC / Chainalysis / TRM partnerships

Things I can do (next session)

Add KeePass kdbx + 1Password parser (with master-password UX)
Wire OCR via Tesseract (or ONNX-pretrained) once you green-light the native dep
Solana ed25519 derivation once we agree on canonical test vectors
Build a public marketing site (this page is internal status)
Wire a release pipeline that signs Mac/Windows binaries