Bitcoin Forum
May 29, 2024, 05:32:56 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
  Home Help Search Login Register More  
  Show Posts
Pages: [1]
1  Bitcoin / Hardware wallets / Re: My Ledger Nano S has been hacked on: August 30, 2017, 11:42:12 AM
It seems that this is "normal" behaviour since the updates for SegWit were put in... https://www.reddit.com/r/ledgerwallet/comments/6wws8e/comfirm_output_2/

Chances are that this Output #2 is in fact a change address in your wallet, so I don't think that you need to worry that your ledger s might have been "hacked" Smiley

Checking your addresses is actually pretty easy, so if you need detailed step by step instructions, I'm sure one of us will be able to help out Wink

Thanks for response... This is helpful. Pls if anyone knows a simplified way to check address, pls provide a link or instructions as I'd feel better about this confirming the address for output #2 (at least for the first time).  Much appreciated.
2  Bitcoin / Hardware wallets / Re: My Ledger Nano S has been hacked on: August 30, 2017, 04:28:09 AM
When the ledger does a transaction where change is involved it generates a new address for the change each time. This is to obfuscate the transactions as much as possible.

You can verify you own the change address by downloading https://iancoleman.github.io/bip39/ (preferably to an air gapped computer) and then while offline input your ledger seed and passphrase if used.

Then under 'Derivation Path' select BIP44 you can find your path in the Chrome app by clicking on the account then selecting ACCOUNT SETTINGS, under ADVANCED you will see the 'Root Path' mine was 44'/0'/0'. This will show you all the derived addresses that you may have used for receiving.
To look at the change addresses try adding a 1 in the External/Internal field. If the address it is trying to send output #2 is listed there then you are good to go knowing those funds are going back to your device.



Thanks for instructions, but I am pretty new to all this and half of what you said a way beyond me. Even if I somehow managed to translate and complete the steps I don't understand why only now after dealing with the Hashflare site did this situation occure. In all other transaction, all of which had "change" left over in my account, never was the transactions presented in such a way.
3  Bitcoin / Hardware wallets / Re: My Ledger Nano S has been hacked on: August 30, 2017, 03:51:43 AM
It is confusing. I am also not sure exactly what happened. But I don't think that your wallet is hacked. Perhaps you changed some of the settings, or the software got corrupted. But to confirm everything, have you written to Ledger wallet support (hello@ledger.fr, please correct me if I am wrong)?
Yes, I reported it to Ledger wallet support. The email confirmation that they received my concern said 1-3 weeks for  response. I can't think of any purpose for Ledger to have a setting that would do what was described above. Sorry if situation isn't clear, don't know how else to explain it.
4  Bitcoin / Hardware wallets / My Ledger Nano S has been hacked on: August 30, 2017, 03:38:01 AM
My first post, new member...
Two days ago I tried to buy into the cloud mining pool Hashflare. When I tried to purchase with Bitcoin (held in my ledger Nano S) I noticed something strange. My device was asking me to confirm "output #1" with the correct btc amount and address (i thought this strange, as I've never seen "output #1" before when moving btc, but because the amount and address we're correct I confirmed the transaction. Then right after the device said "output #2" (very scary) with a btc amount equal to what would be the remaining amount in my account and the address was not known to me. I did rejected that confirmation and the entire order failed. Now anytime I try to move bitcoin from my ledger Nano S for any purchase this same sequence happens. I am not able to move btc without any remaining funds being attempted to be sent to an unknown address. I tried to move all my Bitcoin to a new account within the wallet, but each attempt fails. I have not tried to move my other coins (Bitcoin Cash and Ethereum) but fear the same thing may occur. I sent an email to Hashflare and to Ledger but responses will be 1-3 weeks.
Possible solutions?
My only thought and plan at the moment is to order a Trezor and move all but a very small amount over from the Ledger to the Trezor and allow the tiny amount that I don't send over go through to the unknown address. Good idea? I already bought a Trezor and it is on the way.
Pages: [1]
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!