Hey guys im done with Electrum went to there IRC chat and found 2 bugs that had to do with security flaws and another being not able to re-secure your wallet after recovering it to many bugs wasn't worth saving btc on it.
Care to elaborate what these bugs are?  I'm sure a lot of people (like myself) would be very interested in potential issues... Electrum is a very popular wallet. Did you post about them on the Electrum GitHub issues list: https://github.com/spesmilo/electrum/issues ? |
|
|
|
... is there any other info on why this is happening?
TL;DR: The network is busy Long Version: They say a picture is worth a thousand words... here are two. The first shows the level of unconfirmed transactions over the last 24 hours... you'll note there has been more than 40,000 unconfirmed transactions almost the entire 24 hours... and it has now reached the 100,000 unconfirmed transaction mark. The second shows the fee rates being used... Note the highlighted line at 280-300 sats/byte... that indicates there are near 11 megabytess worth of transactions at or above this level at this point in time... that is over 10 blocks worth of transactions... given blocks occur on average once every 10 minutes, it would take an average of 100 minutes for those transactions to all get mined... assuming NO more transactions are added... given the number of unconfirmed transactions has been climbing all day, its safe to assume a LOT of new transactions are being added... most likely with large fees for fast confirmation times. What fee rate was YOUR transaction at?   For reference: https://btc.com/stats/unconfirmed-txhttps://blockchain.info/charts/mempool-count |
|
|
|
It wouldn't have shown any errors, as the "legacy" BTC and BCH addresses (ie. "1" and "3"-type addresses) are indistinguishable from each other... ie. any given BTC/BCH address is valid on BOTH BTC and BCH networks. Your "best" option is to probably wait for the transaction to confirm, and then use the Ledger BTC recovery tool: https://ledger.groovehq.com/knowledge_base/topics/how-to-recover-btc-sent-on-bch-split-address to recover your BTC. I'm not sure you can attempt recovery before the transaction confirms. Aside from that, your other option involves entering your seed into an address/private key generator like Ian Coleman's BIP39 Tool ( https://iancoleman.io/bip39/) finding the private key for the BCH address you sent the coins to and then sweeping that private key... doing this will reduce the security of your entire wallet as you are potentially exposing your seed and private keys if you do it on a compromised computer. |
|
|
|
If MultiBit HD is broken and the "Repair Wallet" doesn't work... which wouldn't surprise me... try and import your MultiBit HD recovery phrase/wallet words (aka 12 word seed mnemonic) into Electrum... follow this video here: https://www.youtube.com/watch?v=E-KcY6KUVnYElectrum can be downloaded here: https://electrum.org/#downloadElectrum is likely to be a bit more reliable than MBHD at the moment... as MBHD is no longer being developed/maintained. |
|
|
|
So, how can I know which private keys I have used? shall I create a new wallet and sweep the private keys from all the wallets I already have in the folder?
That isn't going to help... Ok, taking a step or two back, because I'm kinda confused about a couple of things, and just want to clarify... make sure I'm properly understanding what has happened. 1. You had BTC in "Knots" and BCH in "ABC" 2. You "swept" the private key from "Knots" into an Electrum wallet (it wasn't an "import" was it?) 3. The Electrum wallet appears to be a 2-of-2 MultiSig ("3" address) 4. You have no idea which is the 2nd wallet used to create the MultiSig, so no way to "co-sign" with the required 2nd signature. Does that sound about right? If you try and create a transaction in the 2-of-2 wallet to move the BTC, when you try to send, it should come up with a summary window, does it say that the transaction status is "partially signed"? If so, we're just looking for ONE private key, as the current wallet already has one, so you just need the 2nd. |
|
|
|
Gotcha, so now I need to keep trying to rebroadcast this hex encoded trx? Is a miner able to work with the hex encoded or do they need a trx id?
The TXID won't help unless they have the transaction in their mempool... you'll probably find they're more likely to need the hex encoded transaction. If you can get a "referral code" for F2Pool, this site might help... I *think* it might be putting transactions directly into their mempool and trying to mine them: https://www.f2pool.com/pushtxNo idea how you go about getting a "referral code" tho... maybe message their support? |
|
|
|
|
Exactly... The second TXID (d225a) that I posted is the one that actually contains the UTXO that you're trying to "spend"... the first TXID (0e513) is the transaction that the "thief" has broadcast.
That's why it originally said "missing input"... and now it says "mempool conflict"...
|
|
|
|
Yeah... because of the previous transaction, the network is for the most part rejecting it as a "double spend"  I tried to broadcast it on my node, it gave me the "transactionID", so it didn't reject it outright... but I'm not sure you will be able to get it to broadcast. Your best bet now is to try and contact some miners and see if they will include your transaction into a block for you. I have no idea how to do that. Maybe if the "fraud" transction doesn't confirm for a while, it might start getting dropped from various nodes, and you might be able to broadcast your new transaction. You'll just have to keep trying. Other than that, there really isn't anything else you can do... sorry  |
|
|
|
|
It gets stored on your SDCard... from memory, I think it is put into the /Downloads folder on your device. Supposedly, it tries to store it on the Ext. SDCard if available... but for me it always seemed to end up in the downloads folder on the internal memory??!?
|
|
|
|
|
you need to put in the "Administrator" password for your computer... it ISN'T your wallet password.
|
|
|
|
|
DOH! I just realised that I told you the wrong transactionID... it should have been: d225ac3049d320b42af24f613cc46955b56afd0722c8600c9e1f91a5659087eb
TransactionID: d225ac3049d320b42af24f613cc46955b56afd0722c8600c9e1f91a5659087eb
N: 4
Script: 76a914e1e35fbcb0d414b9f560dd54e45e58d17ecd5d3688ac
Amount: 0.11567874
Redo the raw transaction, sign it... and again, try broadcasting it... and paste it here
|
|
|
|
I followed your steps and the broadcast page says Missing Inputs. Any ideas? Thanks again.
Can you post the "signed" transaction hex here? use [ code ] tags and I'll try broadcasting from my node Failing that, you'll just need to try broadcasting from various other services... refer: https://bitcointalk.org/index.php?topic=1938621.0 |
|
|
|
Yeah, it won't let you sweep, because it considers the UTXO as already spent (by the unconfirmed transaction)... you will need to manually create the transaction on coinb.in Go here: https://coinb.in/#newTransactionClick "Outputs": enter the address you actually want the coins to go to.... in amount, just go for 0.11 (you're going to "sacrifice" 0.00567874 BTC as a HUGE fee to try and beat the thief!) Click "Inputs": TransactionID: 0e513e1216168f57e07da4d53c9552c74a988f98be2636202ee41ca212bcb110 N: 4 Script: 76a914e1e35fbcb0d414b9f560dd54e45e58d17ecd5d3688ac Amount: 0.11567874 Click "Submit"... ignore the large fee warning... It should generate a "hex" transaction, copy/paste that to the big textbox on the "sign" page... and enter the private key for the address from your bcoiner wallet. It should hopefully give you a "signed" raw transaction... and you can copy/paste that to the "broadcast" page and try broadcasting... What HCP stated is true then, the mempool knows about the transaction. Your next step might be an attempt to do a replace by fee?
You can't use "Replace By Fee"... that only allows you to change the fee... not the destination address... in any case, the original transaction is not marked RBF, so you can't use RBF anyway |
|
|
|
Unfortunately, because that other transaction is already broadcast, you need to try and execute a "double spend"... not easy as a lot of the nodes will have the "fraud" transaction in their mempool and will likely reject your new transaction. You can try to create a transaction using coinb.in but use a much larger fee than the 200 sats/byte the fraud transaction uses. Can't guarantee the network will accept the new transaction thought |
|
|
|
You transaction is in a long chain (like 30-40+) of unconfirmed transactions... which goes all the way back to here: https://blockchain.info/tx/459e88b92a47af82e51d54550f34e489c3176e3e1d12e24f141e92fc380da004All of the inputs to THAT transaction look like they're confirmed, so once that big transaction confirms (could take a while with current network congestion and the "low" fee of only 87 sats/byte )... the rest of the transactions will slowly start to confirm. So, there is hope you may get your coins, but it could take a LONG time. That website looks like it is handling withdrawals in the worst manner possible... It simply uses previous unconfirmed "change" to create a new transaction... and they're making massive chains of unconfirmed transactions  |
|
|
|
You also mentioned "doesn’t allow me easy access my private key", can you still get it though even if you have to jump through hoops?
So, I did some more digging... signed up for a dummy account... and noticed there is a "Backup" option. This lets you download an encrypted wallet file... which downloads as "coinpunk.txt" Further investigation shows: https://github.com/kyledrake/coinpunkA, now defunct and no longer maintained/developed, DIY web-wallet service... so it looks like bcoiner.com is simply a rebadged version of coinpunk. The "good" news, is that I was able to decrypt the "coinpunk.txt"... and it showed this: {
"keyPairs": [
{
"key": "5JRuzjmgty9hdzrs4Woqj76MmejwR4jkTTk6NsfzbFFnXXnDfNd",
"publicKey": "0cc68cb0b0addf94b1b683ec757b4ba3a5e5bdf5",
"address": "12AYxmYbob7qGjP86YLNwZsFhZzRqj7BjA",
"isChange": false,
"name": "Default"
}
],
"transactions": [],
"unspent": []
}
I checked the private key using bitaddress.org, and the key matches the address... So maybe it IS possible that the OP can recover their coins. They'll need to be quick and try to recover them before that other transaction confirms tho! So, maybe it seems that it is not that bcoiner.com is a scam as such, but possibly it is just full of security flaws allowing hackers to steal wallet files/passwords, get the private keys and then steal peoples coins? |
|
|
|
There is a legit Apple developper ID so this guy is legit.
Because there have never been any scam apps on the Apple AppStore or Google Play Store right? An Apple Developer ID simply means they paid some money... "The cost is 99 USD per membership year." Given that this one user has lost 0.11 BTC... that's USD$600+... $99 is a small price to pay  It has been said time and time again: The first rule of bitcoin is " If you don't have the private keys... you don't have any bitcoins" |
|
|
|
|
You will need to provide a transaction ID and/or wallet addresses for anyone to be of assistance.
Where did this transaction come from? Did someone send it to you? Did you withdraw money from an exchange? Did you buy coins from an online service?
If the transaction does not appear on any block explorers other than chain.so, chances are it will not get confirmed and it sounds like it has not propagated well through the network (might be a double spend? or an invalid transaction? or low fee? or spending lots of unconfirmed inputs?)
|
|
|
|
Please don't cross-post across multiple threads... you'll get answers all over the place. It wasn't necessary to start a thread requesting help in the Dev & Tech Discussion section, a thread in the MultiBit section and then "necropost" 2 other threads with the same request Suggest you stick with 1 thread: https://bitcointalk.org/index.php?topic=2383713.new#new |
|
|
|
|
Show Posts
