Bitcoin Forum

Hello everyone,

i have a Problem regarding my Transaction.

I have send 0.39 BTC from my electrum wallet to a Friends wallet who has a ledger nano s.
This is the TXID: https://blockstream.info/tx/2b649c7be09b2d53ea9245bf7f8051ed2f721d41045c6b9fce98020aef4ce75c
Unfortunately the Transaction is not on this wallet, but on the blockexplorer ist completely confirmed.

We already tried to restore his wallet on electrum with the seed to take a look if the bitoins are there, but they Arent.


Can someone please help me?

Thanks a lot

Can you see if Ledger generates exactly the same receiving address as the one you sent the coins to? When I opened Ledger Live, some of my transactions were listed as unconfirmed even though they were confirmed a long time ago. In Ledger Live, open settings, go to 'Help' tab and try to clear cache. It forces your client to resynchronize with the network. It worked for me and now I can see my transactions as confirmed.

The transaction indeed is confirmed.

Is bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 the address your friend gave you ?



What kind of addresses did you see in electrum? Did they all start with bc1.. ?
If so, it seems that he  did not receive the coins. But if all addresses start with 1.. or 3.., they might still belong to his wallet / seed.

P.s. after this is resolved, tell your friend to generate a new seed on the nano s and move all coins to it.
Importing the seed into a software wallet defeats the purpose of having a hardware wallet. This seed should be regarded as compromised now.

Thanks for fast Reply!

No, i cant see the exactly recieve Adress, because the Transaction is not showing in ledger, also not on the restored wallet with seed on electrum.
The Transaction is not in ledger, not unconfirmed / confirmed, like a ghost Transaction, Nothing.

Let me explain, Maybe you know if this is possible:

My Friend Maybe forgot to confirm the recieving adress on the ledger nano s. I mean: If the forgot to confirm the recieving adress with doubleclick at the end, can this be the reason that he dont get the coins to this adress? He just told me this Wallet and i send the coins there.

Is it possible when i send the Money to his "Unconfirmed" wallet that is lost forever, also when its confirmed in the network?

I hope you know what i mean.

Clearing the Cache doesnt help :(, it dont Looks up.

---

#

Hello thanks for help and fast Reply. Crazy Situation for me now.


Yes, bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 is the adress he gave me.

I restored 3 wallets in electrum.

1.) Is empty
2.) Starts with 3, but also Empty
3.) Starts all bc1, that is his actual wallet which was in ledger also, there he generated this adress with bc1.

The first Transaction is not there, i dont know why. Do you think its on the way?
He generated a second adress there i sended small amount, that was instantly there, unconfirmed, after 2 minutes confirmed.
I am afraid that he dont confirmed the Adresse, before gave me (for the first one) and now the coins are lost. I dont know if this is possible.
The second Transaction i did, i am at his house now.


[moderator's note: consecutive posts merged]

Is this transaction (https://blockstream.info/tx/5356b5595824ef9b58b8b806290281acec577b22b169511254f014de3aa3cef9) the one you are talking about? It is fairly small, but it was sent to exactly the same address as the 0.39 BTC transaction so if it was sent by you, there is no reason why the first transaction shouldn't appear in the wallet.

Yes, im Talking About this Transaction! This was the second one. This one is confirmed already.
Yes, that is was i dont understand - this is the same wallet / adress.
The first Transaction is not showing up! I am sitting here with my and his Notebook and i can see there, that the Transaction is not there.
I am so confused.

Do you have any idea what happened or what can i do / check?

Thanks a lot!

I have no idea why both Ledger Live and Electrum don't show the first transaction. It could be some kind of connectivity issue. Try relaunching Electrum a few times or manually changing the server (click on the green dot in the bottom-right corner, go to 'Server' tab, untick "Select server automatically", right-click on any server on the list and select "Use as server"). Can you see the second transaction on Ledger Live?

This is so strange! I send a 3 Transcation to the same wallet and it doesnt arrive also. Maybe the Network got to much traffic?
I dont know the Transaction on electrum and ledger.

Network traffic isn't the problem here as the three transactions were confirmed already and your Electrum seems to be synchronized as it shows the last transaction as confirmed!

Try to send the total balance (0.39167BTC minus fees) to another address you own and see whether it gets broadcasted or it returns the "insufficient funds" error message.
Alternatively, you can export "bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567" private key and import it into a new wallet and see what happens.

Thanks for helping!

Ok, i understand. I am afraid to send 0.39167BTC again. I dont want to loose the next amount. I could send this, because i have the funds on my wallet at the Moment. What is the idea of this Mister?

I will Export the private key to another wallet and will check again. Thanks.

He won't be able to spend all of these coins. Electrum will be missing information about UTXOs which are needed to sign a transaction.

@OP It seems to be a problem on your side. I have tried to create a watch-only wallet in Electrum with your address and I can see all transactions. Try using a VPN. Also, you should be careful when moving your private key around. Do not import it to any random wallet.

you have to send the coins from "bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567" not from your main wallet. If you own the receiving address (the one you are going to send coins too) then there is nothing to be afraid of  :)

please do it then report back.

When you said wallet, did you mean the same address or another address from the same wallet?
Because sending to the same address which didn't went though is a pointless test.

Do you have a log of your conversation where this address is written?
If so, confirm all of the characters if they are the completely the same.

Perhaps you or your friend has been infected with a clipboard hijacking virus.
If the log from my question above isn't the same as that address, I'm afraid that you're the one who's infected.
If it's the same, then your friend is the one who might be infected, try to confirm it by telling him to copy-paste random addresses.

I believe that the address might actually not belong to the wallet of your friend.
Since you already imported the seed from the hardware wallet into electrum, try the following (within the wallet file where all addresses start with bc1..:

• Go to the Menu: View -> Show Console
• Go to the Console Tab
• Enter this: ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")

If it returns false, it seems that this address indeed does not belong to your friends wallet.
The most probably scenario here is that either you or your friend is infected with some kind of malware.
Another option would be that he is trying to steal some coins from you by giving you a different address.

Highly unlikely, because:

• OP's friend is using ledger's software (no weird derivation paths)
• They imported the seed into electrum using all 3 standard derivation paths
• The address originally was retrieved from ledgers software (so no weird index outside of electrums gap limit)

what version of electrum are you using?

In your friend's Ledger Live, when he clicks on "Receive" (to get a receiving address)... Which of the following 3 options is the "Account to Credit" listed as? ???:

- Bitcoin 1
- Bitcoin 1 (legacy)
- Bitcoin 1 (native segwit)

https://talkimg.com/images/2023/11/15/zV3NH.png

Hello everyone,

thanks for your help. Im talking for my friend here, i try to find the coins for him. No Hijacking, not Scam, he dont want to steel coins from me.


I want to answer all your questions and want to try all your tipps, but today / now i wanted to add my standart wallet with my seed (BIP 39 Seed Option in Electrum) again. This is native segwit (p2wpkh) on m/84'/0'/0' path. Now there there are NO transactions anymore in overview now, lol.

1.) I have added standart wallet with my seed (BIP 39 Seed Option in Electrum).
This is legacy (p2pkh) on m/44'/0'/0' path.
There are no transaction in overview.

2.) I have added standart wallet with my seed (BIP 39 Seed Option in Electrum).
This is p2sh-segwit (p2wpkh-p2sh) on m/49'/0'/0' path.
There are no transaction in overview.

3.) I have added standart wallet with my seed (BIP 39 Seed Option in Electrum).
This is native segwit (p2wpkh) on m/84'/0'/0' path.
There are no transaction in overview.

On friday i could see all the transaction, i think i have a problem with the derivation path, but i am not sure.

Does anyone know how i can fix this problem first, then i can go on with your tipps.

Keep in mind that before modifying the derivation path, you need to select the type of address (in your case native segwit p2wpkh). You can try modifying the last number of the derivation path to see if you have used a different account by an accident. So, after selecting the correct type of address, try m/84'/0'/0', m/84'/0'/1', m/84'/0'/2', m/84'/0'/3' .


Still, it sounds like a synchronization problem to me. Can you see a green dot in the bottom-right corner of Electrum?

khaled0111

Hello. Can you please tell me where i can export my privat keys for testing? Which other wallet do you recommend? Thanks!


nc50lc

„When you said wallet, did you mean the same address or another address from the same wallet?
Because sending to the same address which didn't went though is a pointless test.“

Let me explain please:

First Transaction was this one [My friend did not recieve this one].
https://blockstream.info/tx/2b649c7be09b2d53ea9245bf7f8051ed2f721d41045c6b9fce98020aef4ce75c
Adress: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567

Second Transaction was this one [My friend did not recieve this one].
https://blockstream.info/tx/5356b5595824ef9b58b8b806290281acec577b22b169511254f014de3aa3cef9
Adress: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567

Third Transaction was this one [My friend recieved].
https://blockstream.info/tx/14210edd41e629264106f90470a1cff9fd870c391fa4094a93a4fba7e11f2d53
Adress: bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg

Fourth Transaction was this this one: [My friend did not recieve this one].
https://blockstream.info/tx/b655633c8d3f7f67be843dfa067a536c9ff61dcfaefff13b44893b479156291f
Adress: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567

For me it looks now like he is / was not the owner of the adress.
What you think?


--

Do you have a log of your conversation where this address is written?
If so, confirm all of the characters if they are the completely the same.

Yes, i have the log and screenshot. My friend gave me this adress, its 100% correct.

bob123

I believe that the address might actually not belong to the wallet of your friend.
Since you already imported the seed from the hardware wallet into electrum, try the following (within the wallet file where all addresses start with bc1..:
•   Go to the Menu: View -> Show Console
•   Go to the Console Tab
•   Enter this: ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")

If it returns false, it seems that this address indeed does not belong to your friends wallet.
The most probably scenario here is that either you or your friend is infected with some kind of malware.
Another option would be that he is trying to steal some coins from you by giving you a different address.

I tested this, consale gave this output:

 >>
You are connected to an ElectrumX 1.14.0 server.
>> ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")
false
>>


He dont want to steal something from me, also no one ist infected.


Abdussamad
Electrum 3.3.8

HCP
Bitcoin 1 (native segwit)

BitCryptex
This was my error today, i forgot to enter one word from the seed, now i can see the transaction from the paste, but not the one where are missing, ,the one which i sendet to: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 (0.39 BTC)

I can see the other transactions on the watch only wallet, so i guess 99,9% he was / is not the owner of this adress. Thats my only explanation at the moment. I think he logged into ledger, clicked on „revieve“, then he put unlocked the ledger, copied the adress BUT dont confirmed it on the ledger in the last step, so the adress was not confirmed for him. Do you know what i mean? I have no other ideas now. I tried everything you told me.

Anyone has another Idea with this new infos from me?
Can my explanation be right (not the owner, because ledger not confirmed)?

Thank you all,
have a nice day

That's what i think too.




This confirms the assumption that your friend is not in control of the address.




Well, he obviously gave you an address which does not belong to his hardware wallet.
So he either..
1) gave you a different address on purpose,
2) is infected with some kind of malware (e.g. clipping board changing malware) or
3) copy/pasted the wrong address.

If the address on the ledger device screen, matched the address he was shown in Ledger Live, then he should be "OK".

Note that clicking "approve" on the device doesn't actually do anything... It is just there as a sort of trigger to try and make the user take the time to actually double check that the 2 addresses do in fact match. You don't need to click approve to be able to receive coins.

You can in fact get a "receive" address from Ledger Live without even having the device connected, although this is NOT recommended (as you cannot confirm that Ledger Live is giving you the correct address! :P)

The address in question is bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 and you've tried to send bitcoins to it three times.
The second and third attempts were a waste of funds.

My initial question is still unanswered, as the matter of fact, you can potentially solve this by answering them,
unless he already cleaned his PC or the malware is designed to self-destruct after a period of time.

Quoting myself:

Hello everyone, thanks for helping me.

nc50lc

To answer your question: I have no log, but i made an screenshot of the adress.
I can confirm that the characters are exactly the same.
I can confirm that nobody is infecected. I take a lot of transactions every day with
my electrum and everything is fine. My friend is also not infected, i tried it
with copy-paste random adresses and before everything was fine to.

Friends. Today i tried to export my friend private keys with the BIP39 tool.
When i do that, i get this adresses (all private keys starts with L + K)

Adresses:

14iHnGKkqsdM3NykGVpVjKh6vzAUtrgvfg
1PR2qjouLzFG4kN7MxSDieoPKv27f5s3KF
1MbrPiPEc6ejTyMuDyetVjG8ukTD944MhV
1F8rZ2HUfDm5cL7XkZ8tbKhb4xvgQGzfTf
17sEzjjMAi9H2nt5DwPL13GYDvC7ZekC3V
1PW2wFKxEjZ3wW9EJeRktmxNx72LU4gnua
1J4TkMr855PT78sSmNXQBSaiH5Gyz9EYfR
1PLxESd4FiDZvGrki9AFidudtMwabdMesx
1HT3jeTGdB82Vtma3ogeRKnEBppyrahNGJ
1FbCqvgzJyJjH2FuQ45xerFGj3UxtpDQDj
1PSK6ZaiVKKctHXk41tWDF5qfNRmjr8hca
13QrhvjJuCqjkomTYGqzYUeyyJASEMMsuB
18Fed1Xup8Sf54zgLh9K5LcTzq3qHdhRPz
18iwJw4QTYVo7XcayiXAhvCLutCkY8q9Yb
17Gsw3fZFsyTqC6ChJPZDbkDxyU9qYpDbr
163Agjius6UQCTDWKZVMX7WLcakRWnoLcM
1GjQZnhivUCaYMKzU6w9XuPsr9ajsvLs3t
1CbPz91QftfXKAoxNCRkoHSvBieXVES6xg
1DPrv1uU18ZswG3neqWonzv6FDYi1jm4ok
13xfUfuzyLxPhAPbfC8Bf3ffcijG7XAsoB

The adress where i sended the bitcoins (bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567), is not there. ), is
not there. Is this also the proof that he isnt the owner of the adress? Since HCP told me, there is no need to confirm the Adress in ledger, i am not sure  again what happened here.

But also i cant find the private key of this adresse there (bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg),
but thats the Third Transaction which My friend recieved.
https://blockstream.info/tx/14210edd41e629264106f90470a1cff9fd870c391fa4094a93a4fba7e11f2d53

I mean, the BIP39 tool should display the private keys to this adress too, right?
So both adress starts with bc1 are missing on BIP39.

Maybe there is something wrong?

If anyone can fix this, i can donate 500 Euro to the board wallet.
You can also contact me with PN / telegram / wickR.

Have you guys more ideas?
Kind regards and big THANKS

Are you referring to this tool (https://iancoleman.io/bip39/)? If so then first of all, you should use the offline version (https://github.com/iancoleman/bip39/releases) without the Internet connetion. Never enter your recovery phrase on any online website. Once you recover your friend's funds, create a new wallet using Ledger and send the coins there. You should be also be careful when entering the seed on a computer since it could be infected with some malware. Having said that, never enter your seed anywhere unless there is no other choice.

If you tried to use this particular tool to generate your addresses then you should have also modified the derivation path after entering your seed. Under 'Derivation Path', there are a few buttons (BIP32, BIP44, BIP49, BIP84, BIP141). Select BIP84 and you should see addresses starting from bc1. You can also easily modify the account number under that tab.

Hello, yes i mean this tool from coleman, i use it offline. Thanks, so i tried it with BIP84 like you said and now i can see all the adresses with bc1, but the Adress where i sended the funds to (which we are missing) bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567, is not there. I am right that this is also a explanation / proof that he is not the owner of the this adress? I tried account from 0-9. My way is, trying to find the private keys for this Adress bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567, so maybe i get a clue if he is the owner, but i cant find the private keys, so for me it looks also like he is not the owner. I dont know where are the coins, i have no explanation, except he is not the owner and make failure during copy & paste, but this never happened to him....

I don't think he is in control of that address either. You mentioned that you sent a total of 4 transactions. Three to that address and one to another one. However, I can see a fourth transaction (https://blockstream.info/tx/3030bc58b55e9a6608b0e8314ccaa57c2c6371a9534b6988596fa5d242044b3d) in the missing address. Another ~0.1 BTC was sent to bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567. Was that transaction sent by you?

What about bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg address? You claim that your friend could see the transaction received to that wallet. Did you manage to find that address in one of these 10 accounts?

Did you mean, the seed phrase, not private keys alone?

Those are legacy addresses, you have to select the proper derivation path to derive the Native SegWit addresses.
For iancoleman's BIP39 tool, select BIP84 tab.

So you have access to your friend's keys, he must be a very close "friend" to entrust you his keys.
But the post above about "ismine: false" is the answer to your question, and I second it.

Hello. Yes, you are right. I can see 4 transactions on this adress (bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567) too. The fourth with ~0.1 BTC was not sent by me.

This adress i can find in his electrum wallet: bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg.
So this amount send by me he recieved.






Yes, i have tried it with BIP84 and i get all the private keys with the bc1 adresses, but i cant see the missing adress and not the belonging private key.
Yes, he is my best friend, we trust each other.

If your friend didn't send it or didn't ask anyone to pay him to that address then that is really concerning. Imagine how lucky you would have to be to receive free 0.1 BTC. I am sorry but it will seem to be someone else's address if your friend says that he doesn't know anything about the fourth transaction.


Still, this quote concerns me. The story doesn't add up. If you could see all the transactions then you should also had all the addresses. They shouldn't disappear on their own.