W2QR

Balance Scanner

Search beyond the standard 100 combinations, and recover a wallet from a partial seed phrase.

1

Overview

Every time you unlock a wallet, W2QR runs a free scan of the 100 most likely combinations: ten derivation paths across six EVM networks, plus Bitcoin, Solana and Zcash. This catches the overwhelming majority of real wallets.

The Non-Zero Balances Scanner extends this. You define the search envelope yourself — which networks, which derivation paths, which address indexes — and pay only for what you ask for. Estimates are free and unlimited.

2

The two modes

Custom ScanYou know your phrase. You want to widen the search: more networks, more derivation paths, higher index ranges than the free automatic scan covers.Recovery ScanYou are missing one word of a 12- or 24-word phrase. W2QR enumerates every checksum-valid completion in your browser and scans each one.
3

How a scan is counted

The unit of billing is the Billable Request (BR) — one upstream provider call after batching.

BR = evmAddresses × 1

+ solAddresses × 2

+ btcAddresses × 1

Additional EVM networks are free. One ankr_getAccountBalance call covers all selected EVM chains per address. Selecting eight EVM networks costs the same as selecting one.

Asset selection does not change the BR count for EVM either — the provider returns all whitelisted tokens regardless; filtering is local.

4

Price

Rate per BR$0.002Above 25,000 BR$0.001Minimum charge$1.00Free allowance100 BR / 24 hoursHard cap250,000 BR per scanQuote validity15 minutes

The free allowance is tracked per EVM address in a rolling 24-hour window, enforced server-side. It is consumed by the free first-load scan as well as by paid scanner jobs. It cannot be reset by locking and unlocking, clearing browser storage, or using a private window.

5

Payment

The price is shown in USDT. You can pay in USDT, USDC, or native tokens on Polygon (default), BNB Chain, Base, Arbitrum, Avalanche, or Ethereum. Polygon is the default because its network fees are negligible.

Each payment option shows the token amount and estimated gas fee. Options where gas exceeds 25% of the scan price carry a warning. Stablecoin amounts are exact; volatile assets include a 1.5% buffer, disclosed in the UI.

Overpayment is credited to your address's prepaid balance — it never expires and can be used for future scans. If a scan is stopped before completion, unused BR are refunded to your balance pro rata.

6

Derivation paths

PresetPatternFamily
Standard EVMm/44'/60'/0'/0/{i}EVM
Ledger Live EVMm/44'/60'/{i}'/0/0EVM
Legacy EVMm/44'/60'/0'/{i}EVM
BTC Native SegWitm/84'/0'/0'/0/{i}BTC
BTC Taprootm/86'/0'/0'/0/{i}BTC
BTC Nested SegWitm/49'/0'/0'/0/{i}BTC
BTC Legacym/44'/0'/0'/0/{i}BTC
Solanam/44'/501'/{i}'/0'SOL

Custom patterns are accepted as BIP-32 path strings containing exactly one {i} placeholder. The pattern is validated: 2–6 segments, well-formed hardened markers, numeric coin type. Maximum 5,000 indexes per pattern.

7

Mnemonic recovery

BIP-39 phrases include a checksum. Only a small fraction of possible words in a given position produce a valid checksum. This is what makes single-word recovery practical.

PhraseMissing positionValid candidates
12 wordsknown113 – 167 (mean ~135)
12 wordsunknown~1,620
24 wordsknown2 – 15 (mean ~8)
24 wordsunknown~200

Two or more missing words are not supported in this version. For a 10-of-12 phrase, there are approximately 262,000 valid candidates — client-side derivation alone would take over an hour, and prices would rise by three orders of magnitude. This is planned for a later version with server-assisted derivation.

An optional BIP-39 passphrase (the "25th word") can be supplied. It is applied to every candidate and never leaves the browser.

8

Security model

  • -Mnemonics, partial phrases, candidate completions, passphrases and private keys are never transmitted to any server.
  • -All key and address derivation happens client-side, in a Web Worker, using @scure/bip39 and @scure/bip32.
  • -The server receives only public addresses.
  • -The provider API key stays server-side.
  • -The scanner does not alter, weaken, or bypass any existing W2QR cryptographic path.
  • -Candidate material is zeroed and released on: wallet lock, page unload, mode change, and job completion.
  • -Addresses are submitted to the server in shuffled order and in chunks of 500. The server stores only counts and hashes, never the address list.
9

The report

The report is a plain-text .txt file assembled entirely in the browser and delivered via download. It is never uploaded, logged, or transmitted. Two variants are available:

  • -Full report: includes scan settings, all findings, and (in recovery mode) the recovered phrase. Only available while the wallet is unlocked.
  • -Redacted report: identical, but the phrase section is replaced with [REDACTED]. Available after locking and safe to keep or share.
10

After a recovery

  1. Treat the recovered phrase as compromised the instant it exists in a file on your computer.
  2. Create a brand-new wallet with a phrase you generate yourself, and protect it with W2QR.
  3. Move every asset from the recovered wallet to the new one.
  4. Delete the report file. Empty your downloads folder and trash.
  5. Download the redacted report if you want a record of what was found without the phrase in it.
11

Limits

Hard cap250,000 BR per scanEstimates per minute60 per addressQuotes per minute10 per addressConcurrent jobs3 per addressJob timeout30 minutesResult retention30 daysMissing words (v1)Exactly 1