You installed electrum on that computer so you had admin access. I'm assuming your co-workers also had admin access? They probably unknowingly downloaded and installed malware. It is as HCP says a mistake to use electrum on a shared computer especially one where others have admin access.

If someone has physical access to your computer then there is nothing you can do to prevent them from getting to your files. The best you can hope for is to slow them down so that you can move your coins to another wallet using your backups before they break in. The way to do this is to employ full disk encryption (FDE). That requires an OS reinstall so it's not easy to do. It also adds processing overhead to file access to that'll slow down your computer a little and increase battery usage if it's a portable device. These days the processing overhead isn't that great because CPUs have hardware support for encryption related instructions.


FDE only protects you when your computer is switched off so keep that in mind as well.

IMO malware is a bigger threat to most people than someone with physical access stealing from them. So just be careful what programs you download and install, use an adblocking plugin in your browser and be careful about opening links and attachments sent to you via email. Use an anti-virus program too if you are on Windows.

how to bruteforce: https://bitcointalk.org/index.php?topic=1922883.msg24716244#msg24716244

It doesn't need to be online to transact. The unsigned transaction generated by a watch-only wallet contains instructions for the offline wallet to generate the necessary key pairs and corresponding addresses to sign the transaction. However this system wasn't designed for claiming altcoins


You could have run that command with a higher range in the console (replace 30 with a larger number). Your change address must be at a higher index that I thought.

yes it does mean something. it means that's a change address. run this command instead:

It's a known bug

https://github.com/spesmilo/electrum/issues/2968

Until it gets fixed you have to wait a few minutes after running electrum before you edit a label.

There was an issue with older electrum versions where they would mistakenly connect to bitcoin cash servers. However they wouldn't be able to sync with those servers since BCC uses a different transaction version or something. If you're seeing the transaction in your electrum wallet then it's probably a legit BTC tx. You could try connecting to a different server or looking up your address on blockchain.info just to make sure. It's a long shot. Sorry for your loss.

You need the password to decrypt it. If you don't know the exact password but have some idea of what it might be you can attempt to bruteforce it. That means to try various combinations of passwords until you hit the right one. You can bruteforce it using btchris' script given below or hire someone to do it for you:

https://github.com/gurnec/btcrecover

However you must have at least some idea of what the password might be for bruteforcing to be feasible.

On the offline wallet go to the console tab (view > show console if it's not visible) and type this:


You should find the missing address on the addresses tab. ctrl+f lets you search them fyi. they maybe red coloured but that's not a problem.

was the jaxx wallet on the same computer as the electrum wallet? seems like more than one device maybe infected

you can do a cpfp transaction:

https://www.reddit.com/r/Bitcoin/comments/5zchm8/sent_transaction_with_low_fees_in_electrum_can_i/dex2alq/

You can do a manual cpfp transaction. See here:

https://www.reddit.com/r/Electrum/comments/7d029p/max_fee_exceeded_cpfp/dpu2hsu/

To calculate an appropriate fee see the questions at the bottom on this site: https://bitcoinfees.21.co/

Also to prevent issues like these in future stop setting fees manually. Follow the first two steps here and let electrum set fees dynamically based on market conditions:

https://bitcointalk.org/index.php?topic=1916963.msg19015496#msg19015496

no you are not missing anything. electrum's seed format is not supported by any other wallet. besides with a hardware wallet the seed is not supposed to touch a PC or mobile. restoring a PC wallet on a hardware wallet defeats the very purpose of using a hardware wallet.

fedora uses yum not apt-get. you have to install the qt5 package for python 3. search for it using yum search. you also need pip3 (python3-pip). search for that as well. then use pip3 to install electrum from the tarball.

You need to move your btc first and then do the thing with electron cash. What you said above is wrong. BCC has replay protection so your coins will not move on both chains.

And FYI you shouldn't install electron cash on the same computer as electrum. Install it on a separate machine or install it in a virtual machine. You can download free virtual machine software called virtual box (google it) and use that. It's worth it taking your time to do this. Neither BTC nor BCC are going anywhere.

You can see the dangers of using electron cash on the same machine here: https://bitcointalk.org/index.php?topic=2403606.0

calling someone simple is an insult. so stop calling your readers simple. it doesn't mean what you think it means.

what version of electrum are you using? electrum not electron cash. the version number is listed in the window title and can also be ascertained via the help menu > about.

Your trezor holds your private keys. The entire point of using a hardware wallet is that it keeps your private keys away from your computer.

In order to get your priv keys on to your computer you will have to restore from your trezor seed. Begin via file > new/restore. On the seed entry step click on options and check bip39. After that when you right click on addresses in the restored wallet the private key option will be there.

Create a new wallet using file > new/restore. When you asked whether you want a segwit or standard wallet choose standard.

find your wallet file and rename it to something else. then run electrum and restore your wallet from seed:

location of wallet file: http://docs.electrum.org/en/latest/faq.html#where-is-my-wallet-file-located