Bitcoin Forum
May 23, 2018, 03:15:38 PM *
News: Latest stable version of Bitcoin Core: 0.16.0  [Torrent]. (New!)
 
   Home   Help Search Donate Login Register  
Pages: « 1 [2]  All
  Print  
Author Topic: Vulnerability discovered in Electrum 2.6 to 3.0.4: please upgrade  (Read 452 times)
HCP
Hero Member
*****
Offline Offline

Activity: 616
Merit: 782

<insert witty quote here>


View Profile
February 16, 2018, 05:21:17 AM
 #21

Because Electrum is an HD (Hierarchical Deterministic) wallet... it generates a new address every time one is "used"... each address has it's own private key... so multiple address = multiple private keys.

To know which private key you need to use, you have to identify which address(es) your bitcoins were on at the time of the fork. (ps. You haven't specified which fork you're talking about).

Once you know which address(es) your BTC were on at the time of the fork... you can get the private key by going to the "Addresses" tab (you may need to select "View -> Show Addresses")... then right click on the address(es) you need the private key for and select "Private Key" from the menu.

NOTE: don't forget to change the filter from "Receiving" to "Change" to see your "Change Addresses" which might contain some of your BTC.


1527088538
Hero Member
*
Offline Offline

Posts: 1527088538

View Profile Personal Message (Offline)

Ignore
1527088538
Reply with quote  #2

1527088538
Report to moderator
1527088538
Hero Member
*
Offline Offline

Posts: 1527088538

View Profile Personal Message (Offline)

Ignore
1527088538
Reply with quote  #2

1527088538
Report to moderator
1527088538
Hero Member
*
Offline Offline

Posts: 1527088538

View Profile Personal Message (Offline)

Ignore
1527088538
Reply with quote  #2

1527088538
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
blockaudit
Jr. Member
*
Offline Offline

Activity: 33
Merit: 2

Helping the blockchain world build secure++ stuff!


View Profile WWW
April 02, 2018, 03:37:25 AM
 #22

Yes, there's almost a new critical patch every few weeks or so now.

Has the Electron team reached out for a professional security audit yet? It would really boost user's confidence in using it since so many different crypto wallets rely on it now.

Stuff like this is too trivial to justify:

https://github.com/spesmilo/electrum/issues/3374

Code:
class RequestHandler(SimpleJSONRPCRequestHandler):
 
     def do_OPTIONS(self):
         self.send_response(200)
         self.end_headers()
 
     def end_headers(self):
         self.send_header("Access-Control-Allow-Headers", 
                          "Origin, X-Requested-With, Content-Type, Accept")
         self.send_header("Access-Control-Allow-Origin", "*")
         SimpleJSONRPCRequestHandler.end_headers(self)

Allowing * is almost always a no-no.

https://www.blockaudit.org
danbel79
Newbie
*
Offline Offline

Activity: 4
Merit: 0


View Profile
April 17, 2018, 05:52:27 PM
 #23

Hello ThomasV,
Please Help Us. We were somehow hacked and lost a large amount of LTC.

I don't know what to do. Is there anyway you can help us?

I haven't updated my wallet since February 13th, 2018.
Is there a way to seek help from the creators or developers of Electrum Wallet?

Here is the transaction:
https://live.blockcypher.com/ltc/address/Lb5zQN2DnWfyvT1R3ntr5BJPkzR98P1pnG/
HCP
Hero Member
*****
Offline Offline

Activity: 616
Merit: 782

<insert witty quote here>


View Profile
April 17, 2018, 09:51:58 PM
 #24

Just FYI, ThomasV probably won't be able to help you... he is not the developer behind Electrum-LTC... he is the Developer for Electrum which is exclusively BTC.

I suggest that you try and seek help from the Electrum-LTC community: https://electrum-ltc.org/#community

BitMaxz
Legendary
*
Offline Offline

Activity: 1078
Merit: 1019

Bitmain miners is getting worst.


View Profile
April 17, 2018, 10:22:42 PM
 #25

Hello ThomasV,
Please Help Us. We were somehow hacked and lost a large amount of LTC.

I don't know what to do. Is there anyway you can help us?

I haven't updated my wallet since February 13th, 2018.
Is there a way to seek help from the creators or developers of Electrum Wallet?

Here is the transaction:
https://live.blockcypher.com/ltc/address/Lb5zQN2DnWfyvT1R3ntr5BJPkzR98P1pnG/
I suggest you to make a github account instead and go to this link https://github.com/pooler/electrum-ltc/issues
and post your new issue there.
Hope that programmer and developer could help you about your issue.

Pages: « 1 [2]  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!