NUR Recovery Lab
Menu
About Capabilities Networks Formats Process Access FAQ Security Contact Terms Privacy Enter workspace
Enter workspace

Capabilities

The full authorized toolkit.

Research and recovery share one case workspace. Privileged actions always require active authorization and recent MFA when gates are open.

Research

Public identifiers, explicit modes.

Address research

Look up a public address on Bitcoin, Ethereum, BNB Smart Chain, TRON, Litecoin, or Dogecoin. Choose live, recorded, or simulated mode. Results show native balance in exact atomic units, history coverage, and provider-scoped token balances when requested.

Transaction lookup

Inspect a transaction hash through approved providers or packaged fixtures. Missing records stay missing — the lab does not invent confirmations or amounts.

Provenance badges

LIVE means an authorized provider answered. RECORDED means a packaged fixture. SIMULATED means an empty offline mock. UNAVAILABLE means the gate, fixture, or configuration did not yield data.

Option B

Calculate private keys directly from a wallet.

When an artifact is authorized, operators can derive and export keys using the wallet password — without waiting for a sealed verification job.

  • Select an encrypted artifact on an open case.
  • Enter the wallet password (BIP39 passphrase may be blank when empty).
  • Optionally set gap limit, BIP39 accounts, a single derivation path, or a confirm address.
  • Receive a one-time reveal of WIF and/or hex for offline custody. Secrets are not written into audit payloads.

Option B is the fastest path when you already know the password and need keys calculated from the backup.

Option A toolkit

After a sealed verification match.

Bounded password verification can seal a recovery export. That unlocks the broader toolkit on the case page.

ActionWhat it doesNotes
A1 · Calculate + export keys Derive keys from the sealed match at a path or across a gap window. WIF / hex · offline reveal
A2 · Discover funded keys Scan receive/change gaps and BIP39 accounts; optional USDT/USDC on EVM/TRON. Watch-xpub returns addresses only
A3 · Sweep funds Spend from a path or source address to a destination — native or token. ETH/BNB EIP-1559 · TRON · BTC/LTC/DOGE incl. Taproot bc1p…
A4 · Discover + sweep all hits Batch spend every funded hit found in the discover window to one destination. Requires fund-move gate
A5 · Fee-bump Replace a stuck transaction with a higher fee. UTXO BIP125 RBF · EVM same-nonce speed-up or cancel

Cases & intake

Everything hangs off an authorized case.

Cases

Create titled investigations, share read or write access, download sanitized reports, and keep artifacts retention-bounded.

Encrypted intake

Upload supported backups up to 16 MiB. The lab inspects format metadata, encrypts at rest, and never treats identification alone as recovery.

Jobs

Bounded verification jobs run under candidate limits, with cancel, retry-from-checkpoint, and explicit device/policy status.

See wallet format matrix → · See networks →

Next

Use the toolkit in the workspace.

Capabilities above are available when runtime gates, intake policy, and MFA allow them.

Enter workspace Follow the process