LAUNCH·INDEX

Breakout · Nov 2

How "Steal My Bitcoin" turned a two-word dare into the #1 Show HN of the week

A public bounty on an unpatched server, with a live clock, that the audience tried to win and the press covered as it happened.

1 of 86

Rank among Show HN posts on its launch day

Our dataLaunch Index, Oct 24 ↗

19

Hours until the challenge was won

Self-reportedPress reports (Tom's Hardware, GIGAZINE, CryptoSlate, GBHackers); we saw search summaries, not the full articles

$2,000

Bounty size (about 0.0251 BTC)

Self-reportedPress reports; early write-ups give a different figure of about $500, so treat the dollar value as approximate

Steal My Bitcoin is a one-page challenge: a Bitcoin wallet key sits on a public web server, and whoever breaks in can keep what is in the wallet. It was posted as a Show HN on October 24 and was the #1 of 86 Show HN posts that day in our data, ending at 624 points.

Press coverage says the server ran a PHP version that had not yet received a fix for a vulnerability disclosed days earlier, and that a researcher took the bounty after roughly 19 hours and published the exploit. The challenge doubled as a live test of whether new vulnerabilities are easy to exploit.

We could not open the Hacker News thread or the site from our environment, so the points and rank are from our own tracking and everything else is what published reports say. Treat those details as unconfirmed.

What drove it

  1. 1

    A dare with a clock

    Time-boxed challenge

    What they did: The challenge was open to anyone, with a real prize and no end date. Coverage describes people following along as the clock ran.

    Why it worked: An unresolved outcome gives people a reason to check back and to post updates. The story had suspense until someone won.

    Try this: Give your launch a public question that will be answered within days ("will this hold up for a week?") and post the running result.

  2. 2

    The audience is the product

    Participation loop

    What they did: Visitors were invited to attack the site. Reports mention heavy traffic that overloaded it at times, and a public proof-of-concept appeared after the win.

    Why it worked: Everyone who tried had a stake in the outcome and something to say about it, which is what turns readers into commenters and sharers.

    Try this: Design one thing visitors can do, not just read: a challenge, a poll, a bug bounty, a leaderboard.

  3. 3

    A premise you can say in four words

    Identity hook

    What they did: The title is the offer: "Steal My Bitcoin". There is nothing to decode.

    Why it worked: The post gets its meaning from the title alone, so it spreads even when people only see the headline.

    Try this: Write the title as an invitation or a claim a stranger could repeat. If it needs a subtitle to make sense, shorten it.

  4. 4

    Tie it to a live news cycle

    Other

    What they did: Per press reports, the challenge ran days after a widely discussed PHP vulnerability and framed itself as a test of the claim that AI makes exploitation easy.

    Why it worked: Outlets that were already covering the topic had a ready angle, which brought coverage beyond Hacker News.

    Try this: Before launch, list the two debates your audience is having this month and say which one your product settles or tests. Launch while it is still live.

Try this for your launch

Get a new breakout every Tuesday

One case study a week in the Launch Index newsletter, plus the launches that broke through. Free.

Free, every Tuesday. Unsubscribe anytime.

Caveats

  • We could not open the Show HN thread, the site or the news articles from our sandbox (network access was limited), so we did not read comments or verify any press figure.
  • Early write-ups give a prize of about $500; later reports say about $2,000. The dollar value moves with the Bitcoin price and may also reflect a top-up.
  • One report says the key the winner recovered did not match the advertised address; we could not check this.
  • We have not verified the maker's audience size or any promotion outside the Show HN post.
  • This is a security challenge, a format that suits a security audience. Check whether a dare fits your own product.