Exploring Key Recovery from Signature Values

So, if R matches Publickey x, we can actually figure stuff out. Just ran some quick math here... k*G=r.x equals d*G=d.x. Not too complicated, right?

Exactly! If you have the z, r, and s values, you can get the private key by doing z/(s-r). But honestly, it's pretty rare to see these kinds of transactions since anyone could easily take those coins. Seems like a huge risk for no gain.

Totally agree with that. Just sharing an example. R: 0x7362f4d6ce57b70f0fc9781dbc92010f709ea60bee3b43bdfd763e860d6eff2f, S: 0xbb5739e3279db95257555a571a8a8c1cb36be86c1423b92a46137afa0600fceb... If R.x equals Publickey.x, I can show that. Anyone interested in discussing this more?