"All squares are rectangles, but not all rectangles are squares", likewise... "All 'nested segwit' addresses start with a '3', but not all '3' addresses are 'nested segwit'".

As o_e_l_e_o said... "3" == P2SH address... but there are also non-segwit addresses that area also P2SH... like MultiSig.

No... that is the whole point of exporting the private key(s) from Armory... you can then import (or sweep) them to another wallet like Electrum and completely forgot about Armory/Bitcoin Core.

Like I said, you don't even need Bitcoin Core installed (let alone synced) to export your keys.

Just to confirm...

You have 2x Electrum "standard" wallets... each with 12 word + "extra word" Electrum seed mnemonics. You then created a 2-of-2 MultiSig wallet, using those two Electrum seed mnemonics as the (co-)signer keys. Is that correct?

If so, as long as you have those two Electrum seed mnemonics, you can convert them to Master Private Keys (or individual private keys) and then recreate the multisig addresses from those in another compatible wallet.

Unfortunately, finding a compatible wallet will be problematic. Electrum uses a proprietary seed system, so converting from "seed mnemonic -> master private key" (or "seed mnemonic -> private keys") will not be possible using a BIP39 wallet as suggested by others... certainly, it won't work with Mycelium, any of the wallets mentioned above... or the "normal" Ian Coleman BIP39 tool.

At present, the only way I know of to get from an Electrum seed -> Master Private Key (or private keys) is using Electrum with no password/file encryption and extracting the xprv from the unencrypted wallet file... OR by using a modified version of the Ian Coleman Tool, made to work with Electrum seeds.


Technically, all you need is the (in your specific case, two) private keys that match the public keys used to make each address... everything else (public keys, redeem script etc) can be derived from those private keys.


Due to the Electrum seeds not being BIP39 compatible, it would not be a nice easy "copy/paste seed(s)->recreate wallet->send coins" type of recovery. However, while it isn't exactly straight forward... it isn't impossible either.

The algorithm used by Electrum to actually create MultiSig addresses is the same as other wallets... so, as long as you can access the private keys used to create your MultiSig address, there are other MultiSig capable wallets like Bitcoin Core or services like coinb.in that will allow you to recreate the multisig addresses. Although, you would possibly only be able to do one address at a time, as I'm not currently aware of any wallets (other than Electrum) that can create "HD" MultiSig wallets by using xprv's...

---

Electrum seed mnemonics ARE NOT BIP39 compatible. So, unfortunately, none of these solutions will work to get from Electrum seed -> private key(s)

I have gone ahead and verified the installer as provided on the link via PM from btcSCNB... results are as follows:

So, that would indicate that the installer is "good"...

Therefore, assuming that the rest of the information we have is correct, the wallet was most likely to have been compromised in some other manner... keylogger or RAT that somehow managed to get seed mnemonic or wallet file+password... or the OP has unknowingly leaked their seed through some other manner (claiming forks from dodgy wallets? unlikely given it was an unused wallet) or stored it "digitally" in one form or another (ie. email/IM/screen shot/text file) and that storage has been compromised.

@btcSCNB, at this time, and unless you can positively identify how your seed/wallet was compromised, I would seriously contemplate wiping your computer and doing a fresh OS install... then changing ALL your passwords to EVERYTHING... as it would appear something on your PC or with your "OpSec" is compromised.

It is just wanting to know if you want the coins from your Armory address sent to an external address (not your Electrum)... or if they should be "received" into the Electrum wallet that you have open when using "sweep". I would suggest that you want to receive them... if you choose that option, it should pick the first address from your Electrum wallet as the receiving address automatically for you.


It is normal for "modern" wallets to create multiple addresses in the background. You can safely ignore all the other addresses/private keys if you only used one.


Armory requires the block information from Bitcoin Core... and uses Bitcoin Core to communicate with the Bitcoin network. If that data is not available, it will be unable to show you any transaction information, because as far as Armory is concerned, it does not exist!

As Carlton Banks has said, once Bitcoin Core is fully synced, Armory should show your transaction(s) and coins... and you could then send them where you want.

If you still have the installer... I would still try and verify the digital signature. Use the guides as posted by nc50lc.

Or, if you can't verify it yourself, feel free to upload it to a filehost somewhere... PM me the link to it, and I can try and verify the signature for you. At least that way maybe we can either confirm or eliminate the "fake wallet" possibility as the reason for your wallet being compromised.

No, it isn't new feature... it has been available for a while.

And sorry, I forgot to mention... to have the option to use the "watching-only" wallet, you have to connect the Trezor to Electrum and create the wallet WITHOUT using wallet file encryption. When setting the wallet up, you will get this window:


If you leave it encrypted (default option), as the dialog states: "You will need your hardware device to open your wallet."

However, if you disable the encryption (note: this only affects the wallet file created by Electrum... and this file does not contain any private keys or seed information... it only has public keys), you will be able to open the wallet without the device connected and be able to view addresses/transactions etc. (== watching-only wallet)


Yeah, you should not have sent any coins from Trezor to Electrum... you should have been able to spend your "Trezor coins" using Electrum. If you actually created a unique wallet in Electrum, then sent coins from Trezor to Electrum, then spent these coins from Electrum... That would be completely the wrong way!

Or, it is quite possible, that because Electrum defaults to searching for a "Native Segwit" wallet when you setup a hardware wallet, that you were just looking at an "empty" wallet on your Trezor... and, in effect, all you did was actually move coins from one "section" of your Trezor to another.

Without being privy to what exactly you did... and the addresses/wallets involved, it is very hard to know for certain... but my understanding is that Trezor generally only uses "Legacy" (addresses that start with a "1")... and "Nested SegWit" addresses (these will start with "3").

However, when creating a hardware wallet in Electrum, it defaults to "Native SegWit":



If you left it on this default option... you would get "bech32" addresses that start with "bc1"... this is technically still a wallet controlled by your Trezor device (so uses same 24 word seed mnemonic and private keys etc and they're NOT stored in the Electrum wallet), but is NOT the same as the wallet and addresses you would see if you used wallet.trezor.io interface!

To see the same wallet as wallet.trezor.io, you need to select either the "ps2h-segwit (p2wpkh-p2sh)" option... or the "legacy (p2pkh)" option... or create both, depending on how you have been using the Trezor. For instance, I had Trezor before SegWit was implemented, so I have both Legacy and SegWit wallets.


Clear as mud? But, hopefully that does help clarify things a little bit... I know it can be a bit confusing at first!

Yes it is possible to setup a script that automatically transfers BTC from an address (if you have the appropriate private key/seed)... check out the transaction times for this address: 1CC3X2gu58d6wXUWMffpuzN9JAfTUWu4Kj

It is the address that matches the "sample" private key listed on the Bitcoin Wiki: 5Kb8kLf9zgWQnogidDA76MzPL6TsZZY36hWXMssSzNydYXYB9KF

People occasionally send a few satoshi's to this address and they are generally moved within minutes (if not seconds).

Given the speed with which your coins moved (approx 2 seconds)... either your wallet software is "bad"™ and is configured to automatically send coins out... or your seed/private keys have been compromised somehow and the thief has an automated script monitoring the addresses for deposits.


Do you still have the install file or the .exe for portable or standalone Windows version?

If so, have you checked and verified the digital signature of the file? This is the only way to guarantee authenticity of the wallet.

You don't need to delete anything.

Simply visit https://www.electrum.org/#download and get the latest version (currently 3.3.4)... as already suggested, you should verify the digital signature to be 100% sure you have downloaded a legit file, and then install/run it. It will be able to use your existing wallet files.

Do you happen to remember what the previous version was that you were using?

If the 12 word seed mnemonic is not restoring the correct wallet, then there is a possibility that you have the "wrong" 12 word seed mnemonic saved That is to say, it is a "valid" seed, but for a different wallet.

Have you ever used that 12 word seed mnemonic to recover the wallet before? or tested that it generates the correct wallet? I've seen instances before where people have written down a seed, but then accidentally started using a different wallet file... all the while thinking they had their seed mnemonic backup, only to discover months later that they didn't

The "keys" you have are not "Bitcoin" keys... they are Armory specific "root keys" used for being able to restore your Armory wallet. I am not aware of any other wallet that you can use Armory Root Keys with.

No, you do not need to wait for Bitcoin Core to download. In fact, you don't even need Bitcoin Core installed or running to be able to export your keys from Armory.

I have written several posts on how to export your keys from Armory, this post is probably the "tidiest" (quoted in full below): https://bitcointalk.org/index.php?topic=4746784.msg43255691#msg43255691

One thing to note, is that if you attempt to import the keys into Electrum... the Electrum import format is slightly different, as you need to specify the "type" of key it is... I would suggest that for a default Armory setup, the type would be "p2pkh"... so when you import into Electrum you have to enter it as: "p2pkh:YOUR_PRIVATE_KEY_GOES_HERE"

for instance: p2pkh:5Kb8kLf9zgWQnogidDA76MzPL6TsZZY36hWXMssSzNydYXYB9KF

Unfortunately for you, the answers are:
Yes, you have lost all your coins.
No, there is no way to recover them without the recovery phrase.



Hopefully this will serve as a cautionary tale for other users of hardware wallets... make sure you have your recovery phrase stored both safely and securely! It is your only insurance against a lost/damaged/stolen or otherwise inaccessible device.

Ahhhhh OK... I understand now, the site was using Bitcoin Payment URIs or possibly something like Bitpay that provides those somewhat "non-standard" links that hide the address and amount etc?

Yeah, they can be a PITA... for future reference, if it was Bitpay, there are actually "decoders" etc that allow you to decode Bitpay URLs, so you can pay with whatever wallet you like.


Linked isn't quite the right term... it's more like "cloning"... what you're really doing is creating a "watching only" version of your wallet in Electrum, by importing the xpub from your Trezor. You can actually open and view that wallet without having the Trezor connected. Then, if you want to spend coins, you need to connect your Trezor device to sign transactions.


I think it is more like:
- The shop only accepted cash, and I only had a credit card (Trezor), so I had to use an ATM (Electrum) to withdraw cash.

In this analogy, Electrum is the "interface" that lets you access the cash in your Credit Card. So, it's still the same cash, from the same account etc... you're just accessing it in a slightly different way.


As I said above, the Electrum wallet that shows your Trezor info is effectively "watching only"... unless you also have the Trezor device. It would be the equivalent of having a printed balance receipt from the ATM. If you dropped the receipt, someone could still see the balance, but would not be able to spend your money with it... to do that, they would need your credit card (Trezor device)

It seems I may have been too obtuse with my point...

In my opinion, "Cryptocurrency" more about freedom... and what a number of users here are advocating is taking away freedom of choice from managers/campaigns. For instance, what happens if a bounty manager chooses to keep all the records offline in a notebook? Are you now saying that all managers must use and publish a spreadsheet to manage a campaign?

In the general clamour for "transparency" and "openness"... it seems that no-one cares for the freedom of managers.

Don't get me wrong, I'm just playing devil's advocate here... I personally prefer if a manger would use a spreadsheet for most of the reasons that have been listed in this thread... however, I do not advocate for this being forced upon managers if they do not want to do so.

As I stated earlier... I believe that managers should be free to run their campaigns as they see fit and/or have negotiated with the project/business... if users don't agree with the methodology, then don't subscribe to the campaign.

Theoretically, it should... I'm still unsure as to why you even needed to use Electrum in the first place? .

In particular, your original statement really confuses me...
What exactly were you attempting to do that you couldn't just do with the Trezor wallet (wallet.trezor.io)? "It had to be linked to a digital wallet"? This honestly makes very little sense to me...

In effect, Electrum == "wallet.trezor.io" for the vast majority of "basic" wallet functionality. Sure, Electrum has some nice "extra" bits like being able to "freeze" an address or use coin-control etc... but for basic receiving/sending the two operate pretty much identically.


You don't need to "un-link" anything. Electrum is just an interface to the Trezor device... if you use the Trezor device with the Trezor wallet software, or Electrum, or Myceliem or any other Trezor compatible wallet software, you will see the same addresses/transactions/balances. All of this info is on the blockchain... it isn't specific to the wallet software being used.


Simply delete the "linked" Electrum wallet file if it concerns you... all the info is contained in the Trezor device... and in effect, it only contains the Master Public Key (XPUB) from your Trezor... it does not contain any private keys or seeds.

Again, "Linking" a Trezor with Electrum[1] does not create a "new" seed or anything... all it does it import the current "xpub" into Electrum[1] so you can see the addresses/transactions... When you go to spend, it creates an unsigned transaction, sends it to the Trezor device for signing, then broadcasts the signed transaction that it receives back from the Trezor device.


[1] - You can insert any Trezor-compatible wallet software here.

What about Monero? or any of the other privacy based "blockchains"? Granted Privacy =/= Transparency, but still... they don't "transparently" identify participants... neither does Bitcoin for that matter, being pseudo-anonymous.

So, would you be happy with spreadsheets that redacted all "user identifiable" information?

I think that the old quote from John Lydgate sums it up quite nicely...

I can certainly understand why the devs chose this approach (exploiting a DoS vulnerability)... not sure I 100% agree with it, but I honestly can't think of anything else they could realistically have done... they'd already advertised about the previous "error message exploit" here, on twitter, on the official website etc... and still, weeks after the initial incident and patch, there are still users getting caught out.

That's not how it works... wallets don't import java source code from a Ledger device...

What is happening is that Mycelium is finding something "unexpected" when attempting to create the transaction via the Ledger, so it throws this "No scriptcode" error. The error is thrown here in the getScriptCode() method of the TransactionInput Class:
https://github.com/mycelium-com/wallet-android/blob/master/bitlib/src/main/java/com/mrd/bitlib/model/TransactionInput.java#L92

We can see from the code that it is checking if the "script" that it is trying to process is either "P2WSH" or "P2WPKH":
If it is neither of those script "types"... it throws the IllegalArgumentException and we get the "no scriptcode" error.


Again, I suggest that you contact the Mycelium devs using their GitHub issues register and log this error... it seems like the wallet is doing something that results in getting an "unexpected" script type (possibly trying to combine legacy and SegWit inputs? ). Definitely something the devs would be interested in looking into.

If you look at the device... you can only store 4 letters per word (this is generally fairly standard amongst all the "cryptosteel"-type devices that I have seen)


The reason being that, because of the nature of the BIP39 wordlist, 4 letters is enough to identify every word uniquely in the BIP39 list (at least, for the English wordlist).


I believe they also stated that the collection of letters they are distributing is based on "use frequency" for English.

Fantastic work! This will be of great use to the Electrum community... especially for the folks who for whatever reason, don't or can't run Electrum, but need to "rescue" coins contained within Electrum seeds... and also for the people who always ask "What happens if Electrum disappears?"


I had started something similar... but never got around to actually implementing the checksum stuff. I took the lazy option and simply ignored the checksum calculations!