I enabled Bitcoin payments on my eShop, now I may have lost the first 2 orders

[TheCarlwood]

No, we're on the same page. I never sent the product. I realize nothing has hit my wallet. My concern has just been that this is due to an error on my part, or that the funds were stuck in limbo because of me.

Both transactions look identical as far as the logs. So while it's possible two people just ended up backing out, it seems unlikely. If nobody's missing money, or waiting on a product they haven't gotten, I guess it's not a big deal. I just want to know that there's nothing about my set up that is causing an issue with accepting BTC. But yes, I've been careful not to send any product until I see something other than "0.0" in my Electrum wallet.

[1715024186]

1715024186

[btc4ever]

Oh, I misunderstood then.  I thought you had shipped product.  I don't see any evidence of mis-configuration.

If you just want to know if the system is working correctly, why don't you try buying a product from yourself?

Always a good idea to test end-to-end before putting any payment system live with real customers in the first place.

/caseclosed.

[marcotheminer]

Check your transaction id maybe?

[BombaUcigasa]

No, we're on the same page. I never sent the product. I realize nothing has hit my wallet. My concern has just been that this is due to an error on my part, or that the funds were stuck in limbo because of me.

Both transactions look identical as far as the logs. So while it's possible two people just ended up backing out, it seems unlikely. If nobody's missing money, or waiting on a product they haven't gotten, I guess it's not a big deal. I just want to know that there's nothing about my set up that is causing an issue with accepting BTC. But yes, I've been careful not to send any product until I see something other than "0.0" in my Electrum wallet.

Look here: https://blockchain.info/address/17wFxP3TEGMt1w2KNLPCAUdp3CQErciAZG

This is an address mentioned in your log. It does not have any transactions, pending or finished. The only thing you can do customer-side to solve the situation is to check if they really sent money ANYWHERE (ask for their transaction/address), and plan for some kind of contingency, and second, test your system yourself. Get a few bitcents and create a custom cheap product and buy it yourself.

[twobitlolz]

perhaps it's worth mentioning: the payment processing service BitPay has a WooCommerce plugin, among others

https://bitpay.com/bitcoin-shopping-cart-plugins

[b!z]

What is your bitcoin address?
You can check transactions on blockchain.info

Thanks for the reply, so my "Master Public Key" is:

f55c4d640fe2a77676262b38760148b01112c5e3e9ed4f4715f0e72e6b8a7e2843c94990d41f99d 308469d5155c56d379ae91498345b0778b7c884675b2efecc

I went to the site you mentioned and put that in for a search and it said "Unrecognized search pattern"

Don't use your "master private key" again. make a new one.
people can use this to steal your coins from addresses made with this master key iirc.

[BombaUcigasa]

What is your bitcoin address?
You can check transactions on blockchain.info

Thanks for the reply, so my "Master Public Key" is:

f55c4d640fe2a77676262b38760148b01112c5e3e9ed4f4715f0e72e6b8a7e2843c94990d41f99d 308469d5155c56d379ae91498345b0778b7c884675b2efecc

I went to the site you mentioned and put that in for a search and it said "Unrecognized search pattern"

Don't use your "master private key" again. make a new one.
people can use this to steal your coins from addresses made with this master key iirc.

Why is it called Public master key and not Private master key?

[DeathAndTaxes]

What is your bitcoin address?
You can check transactions on blockchain.info

Thanks for the reply, so my "Master Public Key" is:

f55c4d640fe2a77676262b38760148b01112c5e3e9ed4f4715f0e72e6b8a7e2843c94990d41f99d 308469d5155c56d379ae91498345b0778b7c884675b2efecc

I went to the site you mentioned and put that in for a search and it said "Unrecognized search pattern"

Don't use your "master private key" again. make a new one.
people can use this to steal your coins from addresses made with this master key iirc.

Why is it called Public master key and not Private master key?

Because it is the PUBLIC master key not the PRIVATE mater key.  B!z is being incomplete but the advice is good.

However the OP likely should:
a) stop using this public master key
b) generate a new public master key
c) keep master keys secret.

There are some potential vulnerabilities from an attacker knowing the public master key.  The first is that all future transactions can be traced.  From the public master key it is possible to determine all future transactions involving the OP.  Not a good idea to compromise the anonymity of your clients like that.  The second is that IF an attacker obtains a single private key, they can use that combined with the public master key to calculate the private master key and steal all coins from the wallet.   It would require the OP to reveal more information but given the OP has no balance there is really no reason to take the risk.  Just start fresh and keep all master keys a secret.

[Kluge]

What is your bitcoin address?
You can check transactions on blockchain.info

Thanks for the reply, so my "Master Public Key" is:

f55c4d640fe2a77676262b38760148b01112c5e3e9ed4f4715f0e72e6b8a7e2843c94990d41f99d 308469d5155c56d379ae91498345b0778b7c884675b2efecc

I went to the site you mentioned and put that in for a search and it said "Unrecognized search pattern"

Don't use your "master private key" again. make a new one.
people can use this to steal your coins from addresses made with this master key iirc.

Electrum uses deterministic wallets. I wouldn't think it's any more dangerous than a watch-only wallet on Armory. I mean - ideally, you don't want people to know your pubkeys at all, but it's really not a huge deal. There are plenty of published addresses with thousands for months which haven't been broken.

ETA: D&T trumps my response, as always. Assumed OP would switch key after resolution.

[DeathAndTaxes]

To echo what others have said.  It does not appear that you received any payments.  You indicated there were two orders, the second order should have a unique payment address (not the public master key).  I only saw one so you may wish to find the payment address for the second order and verify no funds have been sent to it.

Going forward I would
a) following instructions in the post above to "start over"
b) TEST YOUR SYSTEM.  Buy something from your store, make a payment and track the progress in the plugin and on blockchain.info.   

I find it kinda hard to believe you setup a site involving real money and it never occurred to you to test the system to see with your own eyes what your users will see/experience.

[thomas_s]

I use this plug in and it works very well, I suggest opening electrum going to
file -> preferneces -> wallet (change the gap limit to nice and high I go around 200)

In woocommerce under payment gateways in settings go to bitcoin, I'm guessing you put your master public key here already. Put the confirmations to 6 for your safety.

The plugin will assign a unique address to each order (only if the address is unused it will reuse them if they don't get used), that address is listed in your order details page, the plug in should also monitor the blockchain to see if the address it assigned has received the payment in full then it will change the order to processing.

You can also manually check the blockchain by taking that address that it gives you for the order in the order detail page and enter it into blockchain.info if that address has the total amount of BTC that it says in "total expected btc" or something similar to that the order was paid for.

The problem with the plugin is that the user can not pay and it will still sit there "on-hold" while reducing your stock I usually cancel the orders after 24 hours.

[bee7]

@OP

There is an alternate bitcoin network exist. It is called testnet. The main purpose of this testnet is to test anything without financial risk. Check with Electrum if it possible to run their services on testnet. If this is feasible, then ask them to provide you with account that is running against testnet. Then either switch your running site to that account or deploy a test bed. Ask someone to gift you some test bitcoins (they are really worth nothing, PM me for example) and learn and check all the bitcoin related functionality of your site.

Good luck