The first thing you should do is:


Never do anything without a backup. Actually i wonder why you are operating without having any backup. That's common knowledge.

Secondly, after creating a backup on a different storage medium, that's not a problem of your wallet file itself.
Unfortunately, since you are running a pruned node, you need to redownload the whole blockchain.

Just do -reindex as recommended.

Your 10 points can be boiled down to 2:

• Compromised system
• Phishing

Those two points also are the most common reason people do lose BTC (or other sensitive data/information).

And further, there is a difference between cryptocurrencies and digital currencies.
Cryptocurrencies are digital currencies. But not every digital currency is a cryptocurrency. That's an important difference.

Of course. It always depends on the amount of transactions waiting to get confirmed.
It is just that usually there are less transactions on sunday, and therefore the mempool gets empty which means the transaction fees to get a fast confirmation decreases.

You don't have to wait for sunday to transact. You can always broadcast your transaction with a fee of 1 sat/vB. It might even get confirmed faster. And if it doesn't, it usually will on sunday.

If you calculate the CVSS score of the electrum vulnerability, you'll end up with a score below 4 which basically means the severity is low.
This can not be said about the vulnerability from trezor.

While CVSS has its flaws, it still can be used to estimate the severity of vulnerability. And simply showing a message is by far not as severe as having influence on a passphrase.

I wonder how people can use such wallets. That's ridiculous.



With both, coinomi and coinbase wallet, you are in control of your private keys. Not a 3rd party.
However, both of them should not be recommended at all.

If you don't want to get scammed, don't look on telegram.

You can post in the marketplace and/or the project development section.
Make sure to describe your project.

Poorly written topics with 10 people asking questions because the OP doesn't contain all the necessary information, will result in only scammers and low quality developers contacting you.
If you are looking for high quality work, create a high quality topic with all the information and be prepared to pay a fair price.

Just because it is not signed, it still is called a transaction..
The transaction first has to be constructed. Then it is going to be signed.

You should start explaining what exactly you did and what exactly you are trying to accomplish.
This seems to be  a XY problem.


Without any information, no one is able to help you.

Exactly.
The whole point of a hardware wallet is to be usable with compromised hardware and software without the risk of losing coins.
Requesting sensitive information via an insecure device (which should not put coins at risk even if it is compromised), basically has to go wrong.



Are you comparing electrums low-severity vulnerability a.k.a. just showing a message to compromising sensitive information of a hardware wallet by requesting input over an insecure device??
IMO that's absolutely not comparable. Not even close.

Du traust den Spammern zu viel zu  
Die können ja größtenteils nicht einmal eine Rechtschreibprüfung über die Mails laufen lassen.




Einen Dust Attack auf Spammer/Scammer durchführen.. hmm.. klingt gar nicht mal so blöd  

It's not just "not completely anonymous", but not anonymous at all.
Bitcoin is pseudonymous, which means that you can perfectly identify transactions between pseudonyms.

And with additional information linking a given pseudonym to an identity, it becomes completely transparent.

There are privacy enhancing techniques and wallets which implement protocols to preserve privacy. But the base layer of bitcoin is not anonymous.

Wenn OP nicht genug Englisch spricht um das selber zu übersetzten, sollte das auch nicht im englischen Bereich angeboten werden.
Sonst kann er ja nicht mal auf Fragen antworten oder auf Support Tickets eingehen. 

Vermutlich wird das Angebot eh keinen interessieren 

As far as i am aware you do not have to create any account for the wallet application.
Since i am not a customer of coinbase and neither use their mobile application, i can't say that for sure. But there is no reason an account would be required.

I also don't get what you mean when saying one needs to transfer coins "into it from the noncustodial app" 

No.
In that case, coinbase is in full control over the BTC and you can not send/use them at all.

They give you the right to withdraw that amount of BTC. If they lose the coins or want to lock you out, they are free to do so. You will be left with nothing.



There is a coinbase wallet application which basically is a standard mobile wallet with less functionality.

This has been discussed already.

Short summary is that it is (by far) not as severe as outlined by samourai.
The coinjoin itself is secure. No one is able to link inputs and outputs together.

For a more detailed response, read the first page of this thread.

What exactly is your concern?

The answer to that probably is never.
If a newbie wants to promote a legit service and needs to post images for that, they will simply buy a copper membership.

But newbies who don't want to buy one, most likely don't post quality content which requires the ability to post images.
Ranking up isn't that hard if you aren't just spamming.

A lot of people seem to not have a clue about the current development status of the LN, just like this guy:


The LN is not "dead". It is still under development and not ready yet. You can test it and play around with small amounts, but it didn't even reach beta yet.

So what exactly do you all expect? It is being developed and tested. No one wants to lose money because of a severe bug or vulnerability. The whole process takes time.
And it will take many more years until it becomes fully operational.

Tja, da hat wohl jemand seine Mail so gut wie überall angegeben  

Genau aus diesem Grund nutze ich Delimiter in der Mail-adresse, damit sehe ich bei Erhalt ganz genau wer meine Adresse weitergegeben hat.

Bei googlemail funktioniert das u.A. auch. Also wenn die Adresse z.b. bob@googlemail.com ist, dann sind bob+test@googlemail.com und bob+xxx@googlemail.com beides gültige Mailadressen für den gleichen Posteingang.
Wenn eine Spam mail zu bob+xxx@googlemail kommt, dann weiß ich ganz genau wer die Adresse geteilt hat.

Leider bieten das nicht alle Mailprovider an.

Definitely.
You should only use the lightning with funds you are prepared to lose. It is not even out of alpha right now.
Only recommended for testing / playing around.

And a 5 sat/vB fee will mostly get your TX confirmed in a reasonable timeframe. Even when the mempool heavily spikes, it usually will get confirmed within a few days at max.

So, it seems like you successfully recovered a wallet using your mnemonic code, right?

Can you verify that the "new" wallet is connected (green dot in the bottom right corner) and that the addresses do start with the same char as your old wallet (1.., 3.. or bc1..) ?
People are often choosing the wrong address type. If the first char of your addresses from your old and your new wallet do not match, this most likely is the case here too.

In this case, you just need to make sure to choose the correct option when recovering with your mnemonic code:
P2PKH (legacy) for addresses starting with 1..
P2WPKH-P2SH (segwit) for addresses starting with 3.. and
P2WPKH / bech32 (native segwit) for addresses starting with bc1..

It is not the fact that it was stored on a single wallet. That itself is perfectly fine.
The problem were how the wallet was secured (it wasn't) and how careless the person was, not how the funds were spread.




Why do you assume he was a trader?
Not touching the wallet for multiple years doesn't indicate he was actively trading.