Greetings, friends at Terracoin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug, and as a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible.

watchonly-GUI bug: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Sexcoin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug, and as a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible.

watchonly-GUI bug: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at FairCoin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug, and as a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible.

watchonly-GUI bug: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at EuropeCoin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug, and as a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible.

watchonly-GUI bug: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Viacoin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug, and as a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible.

watchonly-GUI bug: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Sorry pal, not my area of expertise. I was just reporting a GUI bug on behalf of the developers at Komodo Platform who discovered it. Trying to minimize loss. I have no idea if this actually affects any of the HOdl wallets.

Hello HOdlcoin friends. I recently made a post here about a potential GUI wallet bug that may or may not effect this project. The post was deleted, not sure if it was automatic or done by OP/devs. It’s a simple bug that warrants attention due to the potential for investors to misplace funds... I hope the post didn’t appear too alarming or like it was spam. We just felt it was right to inform the community about it directly.

Let me know if you want me to post it here again, or if there are any questions.

Thank you! I am just the messenger for Komodo/@jl777B who does the real work  ; )

Like I mentioned - the bug is simple, but worthy of attention. It may or may not effect ARC GUI wallets. But developers and investors should know about it, definitely.

Looking for feedback on the header: is it TOO alarming? I don’t want to give the impression that a project’s wallet is broken. This is just a bug that COULD happen to anyone and COULD lead to funds misplaced.

Greetings, friends at Zclassic! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Zclassic (ZCL) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Crown! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Crown (CRW) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

It’s public because it’s a bug that could potentially cause investors such as yourself to lose money. As a community, we felt responsible to let investors and developers know about the bug so developers can be proactive (instead of reactive) in addressing it. Like I mentioned, it is a simple bug.

Surely, if Blocknet was aware of a GUI bug that could cause an untold number of investors throughout various crypto projects to lose money, they would tell the community, or at least those projects it is likely to affect directly...

Bugs are commonplace here. Is it really that shocking or is it just my alarming header?

Greetings, friends at Unitus! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Unitus (UIS) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Arctic Coin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Arctic Coin (ARC) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Zero! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Zero (ZER) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Globaltoken! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Globaltoken (GLT) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Argentum! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Argentum (ARG) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at OctoCoin! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

OctoCoin (888) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Blocknet! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Blocknet (BLOCK) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at Internet of People! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

Internet of People (IOP) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay

Greetings, friends at BitSend! As Komodo Platform has been working around the clock to fine-tune the multiple GUI's that are the face of our Agama multiwallet and BarterDEX atomic swap protocols, there have obviously been many bugs found and many debugged. However, one bug in particular was found not only in our Agama GUI wallet, but also in the zcash4mac GUI swing wallet. It is a simple bug, but it warrants your attention. This is a potential money cost bug.

BitSend (BSD) - As a Bitcoin-protocol cryptocurrency, your GUI wallet(s) may be susceptible to this bug.

ISSUE: 'watchonly' addresses appearing as your own in GUI wallet; users could potentially send funds to the address, unaware it is not theirs or available for withdrawal.  You can import <any address> and it becomes a 'watchonly' address. The GUI will display the address as yours, add its funds to your balance, and accept deposits, but cannot be withdrawn. This could be a normal address, my address, a p2sh address, satoshi's address, etc. This can be confusing to an end-user and will lead to many headaches for the developer, as is always the case with misplaced funds.

FOUND: in Komodo Platform's Agama multiwallet (fixed) and zcash4mac GUI swing wallet (@jl777b: "newest QT wallet seems ok about watch only, but not sure of older and when it was fixed")

ex. @grewalsatinder found the bug in his zcash swing wallet:


SOLUTION: For the 'watchonly' address or any address not yours, the value 'ismine' returns false. Any such address gets filtered out.

QUESTIONS:

• How does your recommended GUI deal with watchonly addresses?
• Does your GUI display watchonly addresses as different than actual addresses in the wallet?

We need to experiment a bit to see which approach gets a better response triggering the bug. People WILL lose money if they send funds to a watchonly address.


I've been tasked with spreading awareness and facilitating discussion of this bug, so please let me know if you have any questions. I'll get you some answers and we can minimize the impact. We wanted to reach out directly to the developers of the 60+ coins featured on Agama and BarterDEX as the bug may have a direct impact on you (via your own GUI wallet).

- Jay