Bitcoin Forum

Bitcoin => Hardware wallets => Topic started by: pao108 on August 30, 2017, 03:38:01 AM



Title: My Ledger Nano S has been hacked
Post by: pao108 on August 30, 2017, 03:38:01 AM
My first post, new member...
Two days ago I tried to buy into the cloud mining pool Hashflare. When I tried to purchase with Bitcoin (held in my ledger Nano S) I noticed something strange. My device was asking me to confirm "output #1" with the correct btc amount and address (i thought this strange, as I've never seen "output #1" before when moving btc, but because the amount and address we're correct I confirmed the transaction. Then right after the device said "output #2" (very scary) with a btc amount equal to what would be the remaining amount in my account and the address was not known to me. I did rejected that confirmation and the entire order failed. Now anytime I try to move bitcoin from my ledger Nano S for any purchase this same sequence happens. I am not able to move btc without any remaining funds being attempted to be sent to an unknown address. I tried to move all my Bitcoin to a new account within the wallet, but each attempt fails. I have not tried to move my other coins (Bitcoin Cash and Ethereum) but fear the same thing may occur. I sent an email to Hashflare and to Ledger but responses will be 1-3 weeks.
Possible solutions?
My only thought and plan at the moment is to order a Trezor and move all but a very small amount over from the Ledger to the Trezor and allow the tiny amount that I don't send over go through to the unknown address. Good idea? I already bought a Trezor and it is on the way.


Title: Re: My Ledger Nano S has been hacked
Post by: Sithara007 on August 30, 2017, 03:44:44 AM
It is confusing. I am also not sure exactly what happened. But I don't think that your wallet is hacked. Perhaps you changed some of the settings, or the software got corrupted. But to confirm everything, have you written to Ledger wallet support (hello@ledger.fr, please correct me if I am wrong)?


Title: Re: My Ledger Nano S has been hacked
Post by: pao108 on August 30, 2017, 03:51:43 AM
It is confusing. I am also not sure exactly what happened. But I don't think that your wallet is hacked. Perhaps you changed some of the settings, or the software got corrupted. But to confirm everything, have you written to Ledger wallet support (hello@ledger.fr, please correct me if I am wrong)?
Yes, I reported it to Ledger wallet support. The email confirmation that they received my concern said 1-3 weeks for  response. I can't think of any purpose for Ledger to have a setting that would do what was described above. Sorry if situation isn't clear, don't know how else to explain it.


Title: Re: My Ledger Nano S has been hacked
Post by: Sithara007 on August 30, 2017, 03:56:22 AM
It is confusing. I am also not sure exactly what happened. But I don't think that your wallet is hacked. Perhaps you changed some of the settings, or the software got corrupted. But to confirm everything, have you written to Ledger wallet support (hello@ledger.fr, please correct me if I am wrong)?
Yes, I reported it to Ledger wallet support. The email confirmation that they received my concern said 1-3 weeks for  response. I can't think of any purpose for Ledger to have a setting that would do what was described above. Sorry if situation isn't clear, don't know how else to explain it.

Just tell me one thing. The Ledger wallet can have multiple Bitcoin addresses, right? I have never used Ledger, so I am not sure. The address in Output #2, is there a possibility that it is another address in your own wallet? In that case, you are just moving coins from one of your wallets to another. (I am not sure).


Title: Re: My Ledger Nano S has been hacked
Post by: shunyata on August 30, 2017, 04:03:03 AM
When the ledger does a transaction where change is involved it generates a new address for the change each time. This is to obfuscate the transactions as much as possible.

You can verify you own the change address by downloading https://iancoleman.github.io/bip39/ (preferably to an air gapped computer) and then while offline input your ledger seed and passphrase if used.

Then under 'Derivation Path' select BIP44 you can find your path in the Chrome app by clicking on the account then selecting ACCOUNT SETTINGS, under ADVANCED you will see the 'Root Path' mine was 44'/0'/0'. This will show you all the derived addresses that you may have used for receiving.
To look at the change addresses try adding a 1 in the External/Internal field. If the address it is trying to send output #2 is listed there then you are good to go knowing those funds are going back to your device.



Title: Re: My Ledger Nano S has been hacked
Post by: pao108 on August 30, 2017, 04:28:09 AM
When the ledger does a transaction where change is involved it generates a new address for the change each time. This is to obfuscate the transactions as much as possible.

You can verify you own the change address by downloading https://iancoleman.github.io/bip39/ (preferably to an air gapped computer) and then while offline input your ledger seed and passphrase if used.

Then under 'Derivation Path' select BIP44 you can find your path in the Chrome app by clicking on the account then selecting ACCOUNT SETTINGS, under ADVANCED you will see the 'Root Path' mine was 44'/0'/0'. This will show you all the derived addresses that you may have used for receiving.
To look at the change addresses try adding a 1 in the External/Internal field. If the address it is trying to send output #2 is listed there then you are good to go knowing those funds are going back to your device.



Thanks for instructions, but I am pretty new to all this and half of what you said a way beyond me. Even if I somehow managed to translate and complete the steps I don't understand why only now after dealing with the Hashflare site did this situation occure. In all other transaction, all of which had "change" left over in my account, never was the transactions presented in such a way.


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on August 30, 2017, 07:31:17 AM
It seems that this is "normal" behaviour since the updates for SegWit were put in... https://www.reddit.com/r/ledgerwallet/comments/6wws8e/comfirm_output_2/

Chances are that this Output #2 is in fact a change address in your wallet, so I don't think that you need to worry that your ledger s might have been "hacked" :)

Checking your addresses is actually pretty easy, so if you need detailed step by step instructions, I'm sure one of us will be able to help out ;)


Title: Re: My Ledger Nano S has been hacked
Post by: pao108 on August 30, 2017, 11:42:12 AM
It seems that this is "normal" behaviour since the updates for SegWit were put in... https://www.reddit.com/r/ledgerwallet/comments/6wws8e/comfirm_output_2/

Chances are that this Output #2 is in fact a change address in your wallet, so I don't think that you need to worry that your ledger s might have been "hacked" :)

Checking your addresses is actually pretty easy, so if you need detailed step by step instructions, I'm sure one of us will be able to help out ;)

Thanks for response... This is helpful. Pls if anyone knows a simplified way to check address, pls provide a link or instructions as I'd feel better about this confirming the address for output #2 (at least for the first time).  Much appreciated.


Title: Re: My Ledger Nano S has been hacked
Post by: Coin-Keeper on August 30, 2017, 07:35:16 PM
How about generating the MPK's from the Ledger wallet and then creating a watching only wallet in Electrum?  I do this all the time using a Trezor, so I am thinking it should also be easy on a Ledger (I have not used one).  Taking Electrum online with a watching only wallet is safe and you can see all the addresses, including the change addresses, easily.


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on August 31, 2017, 01:30:33 AM
Thanks for response... This is helpful. Pls if anyone knows a simplified way to check address, pls provide a link or instructions as I'd feel better about this confirming the address for output #2 (at least for the first time).  Much appreciated.
As Coin-Keeper has suggested... importing your Master PUBLIC Key into Electrum is a relatively painless and safe way to check your addresses...

Just download Electrum from here: https://electrum.org/#download

Then create a "new" wallet -> Standard Wallet -> Use a hardware Device -> Connect the ledger then follow the prompts...

After it has created your addresses and opened the wallet, you can view the addresses using "View -> Show Addresses" and then click on the "Addresses" Tab... your Output #2 address should be showing under "Change" (Note: you may need to click the '>' symbol to get the Change section to expand)


Title: Re: My Ledger Nano S has been hacked
Post by: Lanjonath on September 04, 2017, 09:46:53 PM
My first post, new member...
Two days ago I tried to buy into the cloud mining pool Hashflare. When I tried to purchase with Bitcoin (held in my ledger Nano S) I noticed something strange. My device was asking me to confirm "output #1" with the correct btc amount and address (i thought this strange, as I've never seen "output #1" before when moving btc, but because the amount and address we're correct I confirmed the transaction. Then right after the device said "output #2" (very scary) with a btc amount equal to what would be the remaining amount in my account and the address was not known to me. I did rejected that confirmation and the entire order failed. Now anytime I try to move bitcoin from my ledger Nano S for any purchase this same sequence happens. I am not able to move btc without any remaining funds being attempted to be sent to an unknown address. I tried to move all my Bitcoin to a new account within the wallet, but each attempt fails. I have not tried to move my other coins (Bitcoin Cash and Ethereum) but fear the same thing may occur. I sent an email to Hashflare and to Ledger but responses will be 1-3 weeks.
Possible solutions?
My only thought and plan at the moment is to order a Trezor and move all but a very small amount over from the Ledger to the Trezor and allow the tiny amount that I don't send over go through to the unknown address. Good idea? I already bought a Trezor and it is on the way.

I'm experiencing the same thing only diff is that the Output #2 is worth about $102 and not my account balance. But I don't recognize the address


Title: Re: My Ledger Nano S has been hacked
Post by: Lanjonath on September 04, 2017, 09:54:00 PM
Thanks for response... This is helpful. Pls if anyone knows a simplified way to check address, pls provide a link or instructions as I'd feel better about this confirming the address for output #2 (at least for the first time).  Much appreciated.
As Coin-Keeper has suggested... importing your Master PUBLIC Key into Electrum is a relatively painless and safe way to check your addresses...

Just download Electrum from here: https://electrum.org/#download

Then create a "new" wallet -> Standard Wallet -> Use a hardware Device -> Connect the ledger then follow the prompts...

After it has created your addresses and opened the wallet, you can view the addresses using "View -> Show Addresses" and then click on the "Addresses" Tab... your Output #2 address should be showing under "Change" (Note: you may need to click the '>' symbol to get the Change section to expand)

Thanks for this, tried it and the output #2 address isnt on there


Title: Re: My Ledger Nano S has been hacked
Post by: jackg on September 04, 2017, 11:38:39 PM
Thanks for response... This is helpful. Pls if anyone knows a simplified way to check address, pls provide a link or instructions as I'd feel better about this confirming the address for output #2 (at least for the first time).  Much appreciated.
As Coin-Keeper has suggested... importing your Master PUBLIC Key into Electrum is a relatively painless and safe way to check your addresses...

Just download Electrum from here: https://electrum.org/#download

Then create a "new" wallet -> Standard Wallet -> Use a hardware Device -> Connect the ledger then follow the prompts...

After it has created your addresses and opened the wallet, you can view the addresses using "View -> Show Addresses" and then click on the "Addresses" Tab... your Output #2 address should be showing under "Change" (Note: you may need to click the '>' symbol to get the Change section to expand)

Thanks for this, tried it and the output #2 address isnt on there

Have all the addresses been used for a transaction or have you done more than 20 transactions sent/recieved.
If any of these have happend then you'll have to reproduce more addresses from te console (these will be produced from your PUBLIC key, nothing will be done to your hardware wallet from this).
Use these commands and check again for the second output address:
wallet.storage.put('gap_limit', 70)
wallet.storage.write()


If this doesn't work, both you and OP can import your seeds into an offline and sand boxed computer (preferably one running a fresh OS) - but do not try this until you have exhausted all other options, it is a bit more riskier than leaving your coins on a ledger and it is unlikely your ledger has been hacked.


Title: Re: My Ledger Nano S has been hacked
Post by: aenigmamachine on September 14, 2017, 01:01:02 PM
So this is happening to me too.  I've posted over at the Ledger subreddit (https://www.reddit.com/r/ledgerwallet/comments/701eth/multiple_activations_on_ledger_nano_s_required/), to me it looks exactly like a hack.  We need to get the awareness out there on this as people could just be clicking through on their keys not thinking about it and sending BTC to an unknown address.    Absolutely crazy, if this is a hack then it's disastrous for ledger.  If it's not a hack and it's intended behaviour of the Nano S following the SegWit implementation, then it is still a disaster because it looks like, what else, a bloody hack.  Frankly not sure what possibly resolution there can be to this that is satisfactory - I woke up this morning trusting Ledger with my bags and now that trust is shattered.  Spread the word people, terrifying.


Title: Re: My Ledger Nano S has been hacked
Post by: European Central Bank on September 16, 2017, 08:35:09 PM
https://www.reddit.com/r/ledgerwallet/comments/6zgy1x/nano_s_asks_to_confirm_change_output_when_sending/

update the chrome app and you should be fine.



Title: Re: My Ledger Nano S has been hacked
Post by: coinspam on September 18, 2017, 09:23:21 AM
It is confusing. I am also not sure exactly what happened. But I don't think that your wallet is hacked. Perhaps you changed some of the settings, or the software got corrupted. But to confirm everything, have you written to Ledger wallet support (hello@ledger.fr, please correct me if I am wrong)?
Yes, I reported it to Ledger wallet support. The email confirmation that they received my concern said 1-3 weeks for  response. I can't think of any purpose for Ledger to have a setting that would do what was described above. Sorry if situation isn't clear, don't know how else to explain it.
Are you  serious, you could be waiting nearly a month for a response?  :o :o I'd be expecting a few days.


Title: Re: My Ledger Nano S has been hacked
Post by: Antonioz on September 29, 2017, 07:05:44 AM
I'm having the exact same issue and just wrote to ledger support and got the same automatic reply saying I will get an answer in up to 3 weeks  :o I'm glad to find out that I'm not the only one, I too am not authorizing the "output#2" transaction since as it was pointed out, it does look like a hack and even if it isn't it is a bit scary to "authorize" a transaction to an address I don't know. I hope Ledger will resolve this or clarify


Title: Re: My Ledger Nano S has been hacked
Post by: Antonioz on September 29, 2017, 07:14:52 AM
https://www.reddit.com/r/ledgerwallet/comments/6zgy1x/nano_s_asks_to_confirm_change_output_when_sending/

update the chrome app and you should be fine.



ah yes! actually it wasn't the chrome app to update but the bitcoin app on the ledger wallet itself, anyway it solved the issue, thank you!


Title: Re: My Ledger Nano S has been hacked
Post by: coinspam on October 05, 2017, 01:24:46 PM
I'm having the exact same issue and just wrote to ledger support and got the same automatic reply saying I will get an answer in up to 3 weeks  :o I'm glad to find out that I'm not the only one, I too am not authorizing the "output#2" transaction since as it was pointed out, it does look like a hack and even if it isn't it is a bit scary to "authorize" a transaction to an address I don't know. I hope Ledger will resolve this or clarify
Woah! I think I'll stick with a Trezor if they are so slow in getting back to customers.


Title: Re: My Ledger Nano S has been hacked
Post by: expertschoice on October 05, 2017, 09:16:30 PM
https://www.reddit.com/r/ledgerwallet/comments/6zgy1x/nano_s_asks_to_confirm_change_output_when_sending/

update the chrome app and you should be fine.



ah yes! actually it wasn't the chrome app to update but the bitcoin app on the ledger wallet itself, anyway it solved the issue, thank you!

Antionoz,

Did you have any problem installing the Bitcoin App on the Ledger Wallet?  It seems that you must de-install the Bitcoin App and then install it again, is that correct?

I am having a similar problem, and I am worried. If I get into a problem I cannot count on quick support from Ledger.  If I had known how poor (non-existant) their support was, I would have bought another brand.

Thanks!

H Jr


Title: Re: My Ledger Nano S has been hacked
Post by: Antonioz on October 05, 2017, 09:30:46 PM
no problem at all, you have to open the manager app first in chrome (not the bitcoin app), delete the bitcoin app, then reinstall it, it should be all good


Title: Re: My Ledger Nano S has been hacked
Post by: SamMTL on December 15, 2017, 04:26:43 PM
HI guys,

I've had the SAME EXACT PROBLEM. except the second output is not my entire bitcoins but a random amount. I tried sending different amounts and I would get a second request with a completely random different amount of btc. sometimes its 0.6 sometimes its 1.1 sometimes its less sometimes its more.

every time I refuse the transaction.

I tried sending BTG and LTC from my nano ledger S and no problem. only got one output request and worked fined.

Now my BTC are stuck in my nano ledger S and don't know what to do.

Have you guys resolved the problem? I think my laptop has been comprimised, but I'm very safe with this laptop and have good anti-virus anti-malware.


Title: Re: My Ledger Nano S has been hacked
Post by: SamMTL on December 15, 2017, 05:08:45 PM
Followed the instructions of deleting the bitcoin 1.1.9 app and installing the 1.1.10 on my ledger. problem solved.

WHAT A SCARE.

Thank you for the support on this forum


Title: Re: My Ledger Nano S has been hacked
Post by: bob123 on December 16, 2017, 09:54:22 AM
I've had the SAME EXACT PROBLEM. except the second output is not my entire bitcoins but a random amount. I tried sending different amounts and I would get a second request with a completely random different amount of btc.

The second output most likely was the change. Since you were always trying to send different amounts, different 'addresses' has been chosen to send from.
Every of your transactions had a different change which had to be confirmed on the nano s (on an older version).
You might read this: https://en.bitcoin.it/wiki/Change (https://en.bitcoin.it/wiki/Change)


Now my BTC are stuck in my nano ledger S and don't know what to do.

They are never "stuck" in your nano s.
As long as you have stored your 24-word-seed backup, you can always recover your coins from it with any BIP39/44 compatible wallet.
Your ledger nano s is a hierarchical deterministic wallet (https://en.bitcoin.it/wiki/Deterministic_wallet (https://en.bitcoin.it/wiki/Deterministic_wallet)).


Title: Re: My Ledger Nano S has been hacked
Post by: killat on January 06, 2018, 02:21:31 PM
I just configured My Ledger Nano S yesterday and got the same issue.

And ... I made the following test:
 - I sent an amount of BTC to my Exchange account.
 - In Blockchain.info I saw at the same time 2 transactions + Surprise: Final Balance: 0
 - a few seconds until I turned back to Bitcoin Ledger Application my face turned white. I thought all my BTC were gone (when using one of the most secure option in the market: hardware wallet)
 - in the application the balance was correct, not zero.

Conclusion: (not sure if by design or not but) when sending BTC from your Ledger, you will have at the same time 2 transactions: 1 to the destination address, second to another address that is associated to your Ledger, also.


Title: Re: My Ledger Nano S has been hacked
Post by: bob123 on January 06, 2018, 04:45:43 PM
I just configured My Ledger Nano S yesterday and got the same issue.

Thats not an issue at all. Read the previous posts in this thread.


...
In Blockchain.info I saw at the same time 2 transactions + Surprise: Final Balance: 0
...
Conclusion: (not sure if by design or not but) when sending BTC from your Ledger, you will have at the same time 2 transactions: 1 to the destination address, second to another address that is associated to your Ledger, also.

I would suggest you read https://en.bitcoin.it/wiki/Transaction (https://en.bitcoin.it/wiki/Transaction) and https://en.bitcoin.it/wiki/Change (https://en.bitcoin.it/wiki/Change).

When sending BTC you create 1 transaction which usually consists of 1 input and 2 outputs (1 input / 2 output is the case when: input > amount_to_send)
Your input will be 'converted' to 2 outputs. 1 output will be the amount you actually send and the second output will be your change.


Title: Re: My Ledger Nano S has been hacked
Post by: BitBite5 on January 08, 2018, 02:32:27 PM
Could actualy Ledger wallet be hacked or is this just maybe technical issue because of upgrade or similar?
So far I thought this is the safest wallet that exists. It must be some other explanation.


Title: Re: My Ledger Nano S has been hacked
Post by: bob123 on January 08, 2018, 03:42:44 PM
Could actualy Ledger wallet be hacked or is this just maybe technical issue because of upgrade or similar?

No wallet is 100 % safe from being hacked. You just can't achieve full security.
There hasn't been any incidents yet where a ledger wallet got 'hacked'. While there has been found a vulnerability in the trezor wallet, ledger has been safe all the time.
Its alright to assume trezor/ledger hardware wallets are one of the safest way of storing btc's.


So far I thought this is the safest wallet that exists. It must be some other explanation.

It is one of the safest wallet that exist.
The explanation is user not being able to understand whats happening.
That kind of verification of the change output is not necessary and had confused the non-techy people. Most people just don't know how transaction work (i.e. https://en.bitcoin.it/wiki/Change (https://en.bitcoin.it/wiki/Change)).


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on January 08, 2018, 11:51:02 PM
Could actualy Ledger wallet be hacked or is this just maybe technical issue because of upgrade or similar?
So far I thought this is the safest wallet that exists. It must be some other explanation.
Did you actually read ANY of this thread? ::)

It has already been explained that it was just a technical issue, caused by Ledger implementing SegWit functionality to the wallets... Usually, the Ledger ONLY requests confirmation for the original output #1 (the coins you are sending)... it does not ask for confirmation for output #2 (your "change").

The original wallet release that implemented SegWit functionality had a small "bug" in it, that started asking for confirmations for BOTH outputs. This confused people and they immediately started questioning whether or not it was a "hack" or their coins were being stolen.

Ledger immediately released an update that fixed this bug... and all was good. Except for people who don't read properly! :P ::)


Title: Re: My Ledger Nano S has been hacked
Post by: CryptoRobert on January 13, 2018, 11:44:55 AM
Wow, I have been reading all this thread with growing anxiety since I have just transferred all my BTCs to the Nano Ledger. So it is confirmed that wilh the 1.1.10 version of the Bitcoin app the problem is completely solved? More Feedbacks from some of the people who experienced this problem?


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on January 13, 2018, 11:55:11 AM
I have not had "Output#2" issue since updating the Bitcoin App on the Ledger to the required version. Just update the app, you'll be fine.


Title: Re: My Ledger Nano S has been hacked
Post by: CryptoRobert on January 13, 2018, 01:03:07 PM
I have not had "Output#2" issue since updating the Bitcoin App on the Ledger to the required version. Just update the app, you'll be fine.

How do I see which version of Bitcoin App I have? When I'm opening the app I see version 1.9.13, which seems a very different numbering compared to the 1.1.10 you are talking about. And if I'm opening the Ledger Manager I can see that the latest version available is 1.1.18 (again something different that the 1.1.10 you are talking about) but it doesn't tell me anything about the version which is on my device.


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on January 13, 2018, 11:14:20 PM
How do I see which version of Bitcoin App I have? When I'm opening the app I see version 1.9.13,
Version 1.9.13 is the version of the "Chrome" app (aka "Ledger Wallet Bitcoin") that you install to your browser... but it is the version of the actual Bitcoin "app" that you install to the Ledger device (via Ledger Manager) that needs to be updated.


Quote
... And if I'm opening the Ledger Manager I can see that the latest version available is 1.1.18 (again something different that the 1.1.10 you are talking about) but it doesn't tell me anything about the version which is on my device.
Yes, the latest available its 1.1.18... it has been updated a couple of times since they fixed the "Output#2" issue. Any version from 1.1.10 should fix the issue.

You don't need the Ledger Manager to check the version (and you can't actually check it using Ledger Manager)... You have to check it on the device itself. Simply connect the Ledger device, unlock it... then select the Bitcoin App:
https://talkimg.com/images/2023/11/15/zDJXG.jpeg


then scroll down to "About" and select it:
https://talkimg.com/images/2023/11/15/zDVtD.jpeg


And it will display the Version number:
https://talkimg.com/images/2023/11/15/zDjcf.jpeg



Title: Re: My Ledger Nano S has been hacked
Post by: CryptoRobert on January 14, 2018, 12:24:33 AM
How do I see which version of Bitcoin App I have? When I'm opening the app I see version 1.9.13,
Version 1.9.13 is the version of the "Chrome" app (aka "Ledger Wallet Bitcoin") that you install to your browser... but it is the version of the actual Bitcoin "app" that you install to the Ledger device (via Ledger Manager) that needs to be updated.


Quote
... And if I'm opening the Ledger Manager I can see that the latest version available is 1.1.18 (again something different that the 1.1.10 you are talking about) but it doesn't tell me anything about the version which is on my device.
Yes, the latest available its 1.1.18... it has been updated a couple of times since they fixed the "Output#2" issue. Any version from 1.1.10 should fix the issue.

You don't need the Ledger Manager to check the version (and you can't actually check it using Ledger Manager)... You have to check it on the device itself. Simply connect the Ledger device, unlock it... then select the Bitcoin App:

then scroll down to "About" and select it:

And it will display the Version number:


Thank you very much, I have followed your instructions and everything went fine. I have discovered I had a very old version, 1.1.05, and I have upgraded it. However, I had to uninstall THREE other wallets of other coins before the wallet considered to have enough space for the Bitcoin 1.1.18. That's worrying.
I also have noticed that my Ethereum wallet is far behind the latest version available in the store. Anyone knows which are the bugs of the old versions? Given the little space on the Ledger now I am afraid to delete the Ethereum wallet since I have no other wallet except Bitcoin to uninstall if it would tell me again it has no space...


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on January 14, 2018, 05:16:11 AM
I have Bitcoin, Bitcoin Cash, Ethereum and Litecoin all installed at the same time. You should generally be able to have 4 (sometimes 5) apps installed at any one time.

The Ledger will correctly recreate the wallet whenever you reinstall an app, so there is no danger uninstalling and reinstalling apps. You won't lose any coins. If you don't have available space, you can simply uninstall an app and reinstall the app you want/need. For instance, if I needed Bitcoin Gold, I could just uninstall Ethereum, install Bitcoin Gold. If I needed Ethereum again... I could just uninstall Bitcoin Gold and reinstall Ethereum... etc etc ad naseum :P

I would imagine it is a bit of a nuisance if you use multiple currencies ALL the time... but I only use 3-4, so it is fine for me.


Title: Re: My Ledger Nano S has been hacked
Post by: SandroBIT on January 14, 2018, 05:17:35 AM
Also just had the same issue. Thanks to the posts here, I discarded the bitcoin wallet on the ledger (not the chrome wallet) and reinstalled it. Bam... it worked. Sent out funds without any issues. No #2 transaction. In my case, it was the #2 transaction was a large chunk of my balance but just a random number. Not the remaining balance going out to some strange address. Thank you all who posted answers here!


Title: Re: My Ledger Nano S has been hacked
Post by: CryptoRobert on January 14, 2018, 12:01:37 PM
I have Bitcoin, Bitcoin Cash, Ethereum and Litecoin all installed at the same time. You should generally be able to have 4 (sometimes 5) apps installed at any one time.

The Ledger will correctly recreate the wallet whenever you reinstall an app, so there is no danger uninstalling and reinstalling apps. You won't lose any coins. If you don't have available space, you can simply uninstall an app and reinstall the app you want/need. For instance, if I needed Bitcoin Gold, I could just uninstall Ethereum, install Bitcoin Gold. If I needed Ethereum again... I could just uninstall Bitcoin Gold and reinstall Ethereum... etc etc ad naseum :P

I would imagine it is a bit of a nuisance if you use multiple currencies ALL the time... but I only use 3-4, so it is fine for me.

I don't mind the nuisance, I just was worried that I had to uninstall THREE apps before the ledger allowed me to reinstall ONE app (the Bitcoin app). Now I'm having only two apps installed, Bitcoin and Ethereum, and I'm asking myself what would happen if I'd like to update also the Ethereum app and after uninstalling it the Ledger would then again require me uninstall THREE apps - which now are not there again to be uninstalled any more. It is the proportion 3 to 1 which worries me. Why did I not have space to install ONE app after that I had uninstalled ONE app? And, even worse, after that I had uninstalled also a SECOND app? Why did I need to uninstall THREE apps to have again the space to install just ONE app? It doesn't make any sense to me.


Title: Re: My Ledger Nano S has been hacked
Post by: HCP on January 15, 2018, 09:46:04 AM
Probably because the apps are all different sizes... I know the "FIDO U2F" app is HUGE compared to other apps... unfortunately, there is no way to tell how big an app is, or how much space you have left on the device. It might simply be that after you uninstalled one of the smaller apps, it was only just short of free space... ie:

Total space 100
BTCApp:  30
ETHApp 2: 5
Coin3App 3: 50
Coin4App 4: 5

You tried to install the new BTCApp which is 40... so you uninstalled BTCApp... free space = 30 (can't install size 40,  then uninstalled Coin4App... free space = 35 (still can't install size 40), then uninstalled Coin3App, suddenly free space = 85... you can install 40... and still have 45 space left!

Or it could simply be that apps need to be in "contiguous" space... so you can't split an app across multiple free slots and empty space needs to be next to each other? Maybe try and remove ALL the apps and reinstall the ones you want from most important to least important.

But, I honestly have no idea how the file system is setup... I can get 4 or 5 apps... and it's a matter of seconds to uninstall and reinstall an app if I need to change one.


Title: Re: My Ledger Nano S has been hacked
Post by: CryptoRobert on January 15, 2018, 09:37:18 PM
Probably because the apps are all different sizes... I know the "FIDO U2F" app is HUGE compared to other apps... unfortunately, there is no way to tell how big an app is, or how much space you have left on the device. It might simply be that after you uninstalled one of the smaller apps, it was only just short of free space... ie:

Total space 100
BTCApp:  30
ETHApp 2: 5
Coin3App 3: 50
Coin4App 4: 5

You tried to install the new BTCApp which is 40... so you uninstalled BTCApp... free space = 30 (can't install size 40,  then uninstalled Coin4App... free space = 35 (still can't install size 40), then uninstalled Coin3App, suddenly free space = 85... you can install 40... and still have 45 space left!

Or it could simply be that apps need to be in "contiguous" space... so you can't split an app across multiple free slots and empty space needs to be next to each other? Maybe try and remove ALL the apps and reinstall the ones you want from most important to least important.

But, I honestly have no idea how the file system is setup... I can get 4 or 5 apps... and it's a matter of seconds to uninstall and reinstall an app if I need to change one.

Yes, your reasoning makes sense, at some point I will make some experiments to find out something more. I think I have deleted Neo, Stellar and Ripple to make spece for Bitcoin.