Also, I'm not sure how they create the private key, but shouldn't it be possible to use the same file twice, giving both of them the same private key? Break the first one, load up bitcoins on the second one, use it as a payment, then use the now known private key to extract the funds before your victim can, and essentially pass a bad check...