Documentation Menu
Balance Scanner
Search beyond the standard 100 combinations, and recover a wallet from a partial seed phrase.
Overview
Every time you unlock a wallet, W2QR runs a free scan of the 100 most likely combinations: ten derivation paths across six EVM networks, plus Bitcoin, Solana and Zcash. This catches the overwhelming majority of real wallets.
The Non-Zero Balances Scanner extends this. You define the search envelope yourself — which networks, which derivation paths, which address indexes — and pay only for what you ask for. Estimates are free and unlimited.
The two modes
How a scan is counted
The unit of billing is the Billable Request (BR) — one upstream provider call after batching.
BR = evmAddresses × 1
+ solAddresses × 2
+ btcAddresses × 1
Additional EVM networks are free. One ankr_getAccountBalance call covers all selected EVM chains per address. Selecting eight EVM networks costs the same as selecting one.
Asset selection does not change the BR count for EVM either — the provider returns all whitelisted tokens regardless; filtering is local.
Price
The free allowance is tracked per EVM address in a rolling 24-hour window, enforced server-side. It is consumed by the free first-load scan as well as by paid scanner jobs. It cannot be reset by locking and unlocking, clearing browser storage, or using a private window.
Payment
The price is shown in USDT. You can pay in USDT, USDC, or native tokens on Polygon (default), BNB Chain, Base, Arbitrum, Avalanche, or Ethereum. Polygon is the default because its network fees are negligible.
Each payment option shows the token amount and estimated gas fee. Options where gas exceeds 25% of the scan price carry a warning. Stablecoin amounts are exact; volatile assets include a 1.5% buffer, disclosed in the UI.
Overpayment is credited to your address's prepaid balance — it never expires and can be used for future scans. If a scan is stopped before completion, unused BR are refunded to your balance pro rata.
Derivation paths
| Preset | Pattern | Family |
|---|---|---|
| Standard EVM | m/44'/60'/0'/0/{i} | EVM |
| Ledger Live EVM | m/44'/60'/{i}'/0/0 | EVM |
| Legacy EVM | m/44'/60'/0'/{i} | EVM |
| BTC Native SegWit | m/84'/0'/0'/0/{i} | BTC |
| BTC Taproot | m/86'/0'/0'/0/{i} | BTC |
| BTC Nested SegWit | m/49'/0'/0'/0/{i} | BTC |
| BTC Legacy | m/44'/0'/0'/0/{i} | BTC |
| Solana | m/44'/501'/{i}'/0' | SOL |
Custom patterns are accepted as BIP-32 path strings containing exactly one {i} placeholder. The pattern is validated: 2–6 segments, well-formed hardened markers, numeric coin type. Maximum 5,000 indexes per pattern.
Mnemonic recovery
BIP-39 phrases include a checksum. Only a small fraction of possible words in a given position produce a valid checksum. This is what makes single-word recovery practical.
| Phrase | Missing position | Valid candidates |
|---|---|---|
| 12 words | known | 113 – 167 (mean ~135) |
| 12 words | unknown | ~1,620 |
| 24 words | known | 2 – 15 (mean ~8) |
| 24 words | unknown | ~200 |
Two or more missing words are not supported in this version. For a 10-of-12 phrase, there are approximately 262,000 valid candidates — client-side derivation alone would take over an hour, and prices would rise by three orders of magnitude. This is planned for a later version with server-assisted derivation.
An optional BIP-39 passphrase (the "25th word") can be supplied. It is applied to every candidate and never leaves the browser.
Security model
- -Mnemonics, partial phrases, candidate completions, passphrases and private keys are never transmitted to any server.
- -All key and address derivation happens client-side, in a Web Worker, using @scure/bip39 and @scure/bip32.
- -The server receives only public addresses.
- -The provider API key stays server-side.
- -The scanner does not alter, weaken, or bypass any existing W2QR cryptographic path.
- -Candidate material is zeroed and released on: wallet lock, page unload, mode change, and job completion.
- -Addresses are submitted to the server in shuffled order and in chunks of 500. The server stores only counts and hashes, never the address list.
The report
The report is a plain-text .txt file assembled entirely in the browser and delivered via download. It is never uploaded, logged, or transmitted. Two variants are available:
- -Full report: includes scan settings, all findings, and (in recovery mode) the recovered phrase. Only available while the wallet is unlocked.
- -Redacted report: identical, but the phrase section is replaced with [REDACTED]. Available after locking and safe to keep or share.
After a recovery
- Treat the recovered phrase as compromised the instant it exists in a file on your computer.
- Create a brand-new wallet with a phrase you generate yourself, and protect it with W2QR.
- Move every asset from the recovered wallet to the new one.
- Delete the report file. Empty your downloads folder and trash.
- Download the redacted report if you want a record of what was found without the phrase in it.