keyfork mnemonic recover
should accept words in a randomized pattern
Since an attacker only needs to select 24 of the 36 words, they can let the remaining 12 words take any order.
You'd be looking for (X choose 24)*24! > 2^18
, which puts X at 53 for selecting…