Breakout · Nov 2
How "Steal My Bitcoin" turned a two-word dare into the #1 Show HN of the week
A public bounty on an unpatched server, with a live clock, that the audience tried to win and the press covered as it happened.
Show HN points
Our dataLaunch Index, Oct 24 launch, final count in the Oct 30 brief (529 on launch day) ↗
Hours until the challenge was won
Self-reportedPress reports (Tom's Hardware, GIGAZINE, CryptoSlate, GBHackers); we saw search summaries, not the full articles
Bounty size (about 0.0251 BTC)
Self-reportedPress reports; early write-ups give a different figure of about $500, so treat the dollar value as approximate
Steal My Bitcoin is a one-page challenge: a Bitcoin wallet key sits on a public web server, and whoever breaks in can keep what is in the wallet. It was posted as a Show HN on October 24 and was the #1 of 86 Show HN posts that day in our data, ending at 624 points.
Press coverage says the server ran a PHP version that had not yet received a fix for a vulnerability disclosed days earlier, and that a researcher took the bounty after roughly 19 hours and published the exploit. The challenge doubled as a live test of whether new vulnerabilities are easy to exploit.
We could not open the Hacker News thread or the site from our environment, so the points and rank are from our own tracking and everything else is what published reports say. Treat those details as unconfirmed.
What drove it
- 1
A dare with a clock
Time-boxed challengeWhat they did: The challenge was open to anyone, with a real prize and no end date. Coverage describes people following along as the clock ran.
Why it worked: An unresolved outcome gives people a reason to check back and to post updates. The story had suspense until someone won.
Try this: Give your launch a public question that will be answered within days ("will this hold up for a week?") and post the running result.
- 2
The audience is the product
Participation loopWhat they did: Visitors were invited to attack the site. Reports mention heavy traffic that overloaded it at times, and a public proof-of-concept appeared after the win.
Why it worked: Everyone who tried had a stake in the outcome and something to say about it, which is what turns readers into commenters and sharers.
Try this: Design one thing visitors can do, not just read: a challenge, a poll, a bug bounty, a leaderboard.
- 3
A premise you can say in four words
Identity hookWhat they did: The title is the offer: "Steal My Bitcoin". There is nothing to decode.
Why it worked: The post gets its meaning from the title alone, so it spreads even when people only see the headline.
Try this: Write the title as an invitation or a claim a stranger could repeat. If it needs a subtitle to make sense, shorten it.
- 4
Tie it to a live news cycle
OtherWhat they did: Per press reports, the challenge ran days after a widely discussed PHP vulnerability and framed itself as a test of the claim that AI makes exploitation easy.
Why it worked: Outlets that were already covering the topic had a ready angle, which brought coverage beyond Hacker News.
Try this: Before launch, list the two debates your audience is having this month and say which one your product settles or tests. Launch while it is still live.
Try this for your launch
Get a new breakout every Tuesday
One case study a week in the Launch Index newsletter, plus the launches that broke through. Free.
Free, every Tuesday. Unsubscribe anytime.
Caveats
- We could not open the Show HN thread, the site or the news articles from our sandbox (network access was limited), so we did not read comments or verify any press figure.
- Early write-ups give a prize of about $500; later reports say about $2,000. The dollar value moves with the Bitcoin price and may also reflect a top-up.
- One report says the key the winner recovered did not match the advertised address; we could not check this.
- We have not verified the maker's audience size or any promotion outside the Show HN post.
- This is a security challenge, a format that suits a security audience. Check whether a dare fits your own product.
Sources
- Launch Index page for Steal My Bitcoin ↗
- Show HN thread (item 50224916) ↗
- Tom's Hardware coverage ↗
- GIGAZINE coverage ↗
- CryptoSlate coverage ↗
Checked on Nov 2. Spotted something wrong? Email [email protected] and we'll correct it.