Self-custody recovery · Stacks & Bitcoin

Don't know which wallet,
or which path, your assets
are on? Scan and send.

When a wallet app breaks or forgets an account, your assets don't disappear — they're still on-chain, sitting behind a derivation path the app no longer checks. Recovery Scanner searches every path, finds what's yours, and helps you send it to fresh keys. It runs on your computer, its code is readable, and your recovery phrase never leaves your machine.

No account. No upload. Nothing to enter your seed into on this page.

Runs on your machine

A small local program, not a website. It opens in your own browser at localhost and talks to no one unless you scan, pay, or connect a wallet.

Your seed never leaves

Your recovery phrase is processed in memory on your device to derive keys and sign. It is never transmitted to Block9 or over the internet.

Verify every copy

Each release is fingerprinted and that fingerprint is signed on-chain by a Block9 wallet. Confirm your download is genuine before you trust it.

Who it's for

If any of this is you, your assets are probably still reachable.

01Your wallet app broke or won't restoreIt crashes, won't import your phrase, or shows an empty balance you know isn't right.
02Your balance moved to an account you can't seeSome apps derive accounts on paths a reinstalled app no longer checks. The funds are there — just off the beaten path.
03You're retiring a phrase for goodYou want to sweep everything off an old seed and onto fresh keys, cleanly, one last time.
On Stacks — finds and moves
STX sBTC SIP-10 tokens NFTs BNS names
On Bitcoin — finds and identifies
BTC Inscriptions Runes BRC-20

Bitcoin is scanned across common derivation paths, and every taproot address is checked on-chain — so you see the actual assets by name (which inscriptions, which runes, which BRC-20 tokens), not just a balance. Ordinals ride on specific coins that ordinary wallets will spend as a fee and destroy, so the scanner hands these to inscription-aware tools like Sparrow to move safely — with the coins frozen.

Without an ordinals data key, every taproot address is flagged as risky by default rather than assumed empty. Some BNS names live in managed namespaces that only their own app can transfer.

How it works

Four steps, in order, on your own computer.

You stay in control the whole way. Nothing is swept automatically, and every move is yours to confirm.

STEP 01

Download and run it locally

Install Node.js, then run node recovery-scanner.mjs and open the local page in your browser. It's readable source — you can inspect exactly what it does first.

STEP 02

Accept the terms, on-chain

You accept by broadcasting a tiny transaction — a cryptographic, timestamped record of agreement. A flat $2 scan fee follows. Then, and only then, the seed field unlocks.

STEP 03

Enter a phrase you're retiring

The scanner derives your addresses across many schemes and shows everything it finds. Your phrase is used locally and never sent anywhere — a live indicator shows when the app is offline versus reaching the web.

STEP 04

Move assets to fresh keys

Send what you found to a new wallet whose keys never touched this tool. Every transfer carries an on-chain post-condition that limits it to the one asset you're moving, and unknown tokens are flagged for you to assess. Then delete the folder and never reuse the phrase.

Why trust it

The safest recovery tool is the one you don't have to trust.

Not a promise — a property. Because the code is local and readable, what you inspect is what runs, and you can prove the copy is genuine before you enter anything.

Readable, not compiled

The program is plain source you can open and read. There's no hidden binary between the code published and the code that runs — the instruction to "read it before you trust it" is one you can actually follow.

Signed on-chain by a wallet

Each release hash is broadcast in a transaction from a known Block9 wallet. A transaction is a signature — so the fingerprint is published in a way no one can forge or quietly take down.

Air-gapped mode

For the highest stakes, run it on a machine with networking off. It signs offline to a file you broadcast from a separate device — your phrase never shares a computer with an internet connection.

1Readable local scriptWhat you read is what runs. No build step to trust.you are here
2Signed, reproducible desktop buildA binary you can still check against the public source.
3Browser extensionPinned at install, but with an update channel to trust.
4A website that asks for your seedRe-fetches trust every visit. Indistinguishable from phishing.never

Recovery is where scammers hunt. Read this.

  • This page will never ask for your recovery phrase. Nowhere on recovery.vb9.app is there a box to type a seed. If you ever see one claiming to be us, it's fake — leave.
  • No "support" will ever contact you. Block9 has no agents who message users. Anyone who reaches out claiming to help recover your wallet is stealing from you.
  • Entering a phrase on your own machine is normal; disclosing it to anyone is theft. The tool runs locally. A person, chat, form, or "recovery service" asking you to send it is the scam.
  • Verify before you run. Check your download against the on-chain release hash. A copy that won't verify may be modified — don't type a phrase into it.
Plainly stated

What it costs, and what it isn't.

$2 / scan

A flat service fee

Paid in STX, sBTC, or USDCx to the Block9 treasury when you start a scan. You can pay from what you're recovering. No subscription, no percentage of your assets.

Not a wallet

It doesn't hold anything

Block9 never takes custody of your assets or your keys. The tool finds and moves things you control; it is not a place to keep them afterward.

At your risk

Read the terms

Blockchain transfers are final and irreversible. The tool is provided as-is. You're responsible for verifying addresses and for what you sign. See the full terms before you use it.

Get the scanner

Find your assets. Send them home.

The scanner isn't public yet — we're finishing testing and a legal review before release. When it launches, you'll download the readable source, verify it against the on-chain release, and run it on your own machine.

Will require Node.js 20.19+ · Windows, macOS, or Linux · ~200 KB · 6 dependencies, 0 known vulnerabilities