Bitcoin Forum
October 23, 2018, 11:01:20 AM *
News: Make sure you are not using versions of Bitcoin Core other than 0.17.0 [Torrent], 0.16.3, 0.15.2, or 0.14.3. More info.
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2]  All
  Print  
Author Topic: Vulnerability discovered in Electrum 2.6 to 3.0.4: please upgrade  (Read 598 times)
HCP
Hero Member
*****
Offline Offline

Activity: 756
Merit: 932

<insert witty quote here>


View Profile
February 16, 2018, 05:21:17 AM
 #21

Because Electrum is an HD (Hierarchical Deterministic) wallet... it generates a new address every time one is "used"... each address has it's own private key... so multiple address = multiple private keys.

To know which private key you need to use, you have to identify which address(es) your bitcoins were on at the time of the fork. (ps. You haven't specified which fork you're talking about).

Once you know which address(es) your BTC were on at the time of the fork... you can get the private key by going to the "Addresses" tab (you may need to select "View -> Show Addresses")... then right click on the address(es) you need the private key for and select "Private Key" from the menu.

NOTE: don't forget to change the filter from "Receiving" to "Change" to see your "Change Addresses" which might contain some of your BTC.


1540292480
Hero Member
*
Offline Offline

Posts: 1540292480

View Profile Personal Message (Offline)

Ignore
1540292480
Reply with quote  #2

1540292480
Report to moderator
1540292480
Hero Member
*
Offline Offline

Posts: 1540292480

View Profile Personal Message (Offline)

Ignore
1540292480
Reply with quote  #2

1540292480
Report to moderator
1540292480
Hero Member
*
Offline Offline

Posts: 1540292480

View Profile Personal Message (Offline)

Ignore
1540292480
Reply with quote  #2

1540292480
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
blockaudit
Jr. Member
*
Offline Offline

Activity: 34
Merit: 2

Helping the blockchain world build secure++ stuff!


View Profile WWW
April 02, 2018, 03:37:25 AM
 #22

Yes, there's almost a new critical patch every few weeks or so now.

Has the Electron team reached out for a professional security audit yet? It would really boost user's confidence in using it since so many different crypto wallets rely on it now.

Stuff like this is too trivial to justify:

https://github.com/spesmilo/electrum/issues/3374

Code:
class RequestHandler(SimpleJSONRPCRequestHandler):
 
     def do_OPTIONS(self):
         self.send_response(200)
         self.end_headers()
 
     def end_headers(self):
         self.send_header("Access-Control-Allow-Headers", 
                          "Origin, X-Requested-With, Content-Type, Accept")
         self.send_header("Access-Control-Allow-Origin", "*")
         SimpleJSONRPCRequestHandler.end_headers(self)

Allowing * is almost always a no-no.

https://www.blockaudit.org
danbel79
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
April 17, 2018, 05:52:27 PM
 #23

Hello ThomasV,
Please Help Us. We were somehow hacked and lost a large amount of LTC.

I don't know what to do. Is there anyway you can help us?

I haven't updated my wallet since February 13th, 2018.
Is there a way to seek help from the creators or developers of Electrum Wallet?

Here is the transaction:
https://live.blockcypher.com/ltc/address/Lb5zQN2DnWfyvT1R3ntr5BJPkzR98P1pnG/
HCP
Hero Member
*****
Offline Offline

Activity: 756
Merit: 932

<insert witty quote here>


View Profile
April 17, 2018, 09:51:58 PM
 #24

Just FYI, ThomasV probably won't be able to help you... he is not the developer behind Electrum-LTC... he is the Developer for Electrum which is exclusively BTC.

I suggest that you try and seek help from the Electrum-LTC community: https://electrum-ltc.org/#community

BitMaxz
Legendary
*
Offline Offline

Activity: 1218
Merit: 1032

Bitmain miners is getting worst.


View Profile WWW
April 17, 2018, 10:22:42 PM
 #25

Hello ThomasV,
Please Help Us. We were somehow hacked and lost a large amount of LTC.

I don't know what to do. Is there anyway you can help us?

I haven't updated my wallet since February 13th, 2018.
Is there a way to seek help from the creators or developers of Electrum Wallet?

Here is the transaction:
https://live.blockcypher.com/ltc/address/Lb5zQN2DnWfyvT1R3ntr5BJPkzR98P1pnG/
I suggest you to make a github account instead and go to this link https://github.com/pooler/electrum-ltc/issues
and post your new issue there.
Hope that programmer and developer could help you about your issue.

MrCrank
Sr. Member
****
Offline Offline

Activity: 686
Merit: 253



View Profile
August 04, 2018, 08:17:43 AM
 #26

Hello,

On my old PC installed old version Electrum.
When I open my first wallet with 0 balance, it's ok (synced).
When I open my second wallet with balance, I see strange transaction "unknown" amount "+0." and wallet can't sync..

Who can explain this?

Thanks.
HCP
Hero Member
*****
Offline Offline

Activity: 756
Merit: 932

<insert witty quote here>


View Profile
August 05, 2018, 05:42:29 AM
 #27

Possibly an old unconfirmed transaction that was stored within the wallet file (was it an outgoing transaction?) but the inputs got "double spent" in another transaction and the transaction can no longer be validated properly.

If you know what the seed is for that 2nd wallet... try and create a new version of the wallet ("File -> New/Restore -> NEWWALLETNAME -> Standard Wallet -> I already have a seed") and see if it syncs up...

Pages: « 1 [2]  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!