Here it is:

The chat is fake and this scam is old.

Where did you hear about this website and its promo code?

Yes. Even if there are no wallets supporting BIP38 in the future, you can just use a tool to decrypt it and import it in any Bitcoin wallet.

For example, BitAddress.org (which is open source and can be run offline) has an option to decrypt them.

So, Electrum isn't safe anymore now that they fixed the exploit?

Why does discovering a small exploit (yes, small) make a software unsafe forever? Even BitcoinTalk has been invaded before (remember the breach?), and both Ledger and Trezor have been exploited before.

In the whole ecosystem, Electrum is one of the safest wallets. A small exploit of unfiltered message errors from third-party servers (that's all it was) won't change that.

Go to Electrum.org (THE ONLY WEBSITE YOU SHOULD USE) and download the latest version of Electrum which fixes these fake messages exploit. Optionally (but highly recommended), verify the file signatures of the file you download.

The steps to do that can be found on Electrum’s download page.

I wasn't saying that to you. I was talking to the user above that said Electrum wasn't safe because of this.

I understand why many people fell for this, so I'm not blaming all of that on the users. But I've been using Electrum for over 2 years and I ALWAYS verify the signatures before using a new version. Mainly if the URL isn't "electrum.org" (I always triple check every single time).

It's modifying the response on the hacker's server. Since he is hosting it, he can do everything he can (the code is open after all). That's not a big deal. It would be a huge exploit if he could change the way other public servers behaved.

They aren't restored along with the seed.

What you can do is use a plugin (which already comes in Electrum) called LabelSync to send your (encrypted) labels to a server and get them back whenever you want.

Here is a quick tutorial for it: https://bitcoinelectrum.com/how-to-use-the-electrum-label-sync-plugin/

You can test yourself.

1. Create your wallet;
2. Write down the seed;
3. Open your Neon wallet with it;
4. Check the address and memorize it;
5. Now, reset the device;
6. Restore it with the seed from step 2;
7. Open Neon wallet again and check the address.

It will be the same.

That's what your backup seed is for.

If you lose/break your Ledger or have to reset it, you can just use the backup seed to restore your wallet (including your NEO wallet).

It's not that Electrum isn't safe. People aren't safe.

Some guy found a small exploit on the way the client showed the error messages from the server, and they used that to make users go to a fake website and download an infected wallet. If the user has the idea on mind that only ELECTRUM.ORG is legit, he will never fall for this kind of stuff. This is more of a social engineering issue than a security issue. For now, Electrum is still pretty safe.

Everything is right.

It says "This key is not certified with a trusted signature!" because you haven't manually trusted ThomasV's key. But if you imported it right, it matches with the signature of the file you downloaded.

Do you plan on keeping the mac offline (not connected to the internet)?

If so, it doesn’t matter as the DDoS “blocks” connections to Electrum’s servers, but if you’re not connected to the internet, you’re not connecting to any server anyways.

This attack isn’t a risk to your coins. No one can steal them with it. All it foes it make the user’s life harder since he can’t connect to a server to move his coins.

The Ledger Nano S needs energy to work. If it’s not connected anywhere, it won’t turn on. You either need to plug it in your computer/laptop/phone or plug it directly into your power plug with an adaptor (just like you would do to charge a phone). That’s what we meant.

And like I said, it doesn’t really matter. If you are super paranoid, it’s up to you to decide if it’s worth plugging it to a power supply or if that’s too much and you can do in your computer.

O famoso esquema do "alguém já ouviu falar do X?" ...

2500% em 120 dias (ou 625% ao mês)... Já vi muito scam descarado, mas esse daí tá EXTREMAMENTE de parabéns.

Investindo apenas R$ 100,00 uma unica vez, você consegue em um ano, incríveis R$ 2.108.900.283.435 !!!!!

SERIO!!!! R$ 100,00 e depois de um ano, 2 TRILHÕES DE REAIS. P*TA QUE PARIUU!!! Acabou a pobreza do mundo.

---

Eu juro que queria conhecer o cara que tem a ideia de criar um site desses.

Rest assured knowing that no transaction can be deleted once confirmed. That's most likely just a visual error on Electrum's side (thinking that the tx hasn't been broadcasted nor confirmed because of the server's connection failing).

Local means that the transaction hasn’t been sent yet. Basically, you created the transaction but didn’t broadcast it because of the synchronization issues.

Maybe you tried to make the tx while you weren’t connected to the server (due to the DDoS), then you broadcasted it when they went up, and your wallet still thinks you didn’t. If you can see the tx in a block explorer, then it definitely was broadcasted.

It doesn’t really matter. But if there is an extra step to keep it more secure (we are just being paranoid here), you may choose to do it (by you using a usb charger). I don’t think that’s necessary, but it’s your choice. Just don’t sweaty too much on it.

Like he said, just use the Recovery Seed verification app. It’s that simple. You don’t need to complicate things.

The only way is by donating 15BTC to the forum to become a Donator (no joke).

We could report it to their web hosting. According to WhoIs, they are hosted on netengi.com servers.

And according to NetEngi's ToS:

Source: https://netengi.com/tos.html

I will send them a message.

Electrum servers are being DDoS'ed. You need to manually select a server until it connects, wait until the attack is over or if you are really in a hurry, export your keys and use a different wallet.

https://twitter.com/ElectrumWallet/status/1114987055736655873