Bitcoin Forum
December 10, 2018, 05:49:53 AM *
News: Latest Bitcoin Core release: 0.17.0 [Torrent].
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Ledger Nano S. Question about sending BTC  (Read 39 times)
usmanov123
Full Member
***
Offline Offline

Activity: 420
Merit: 102


View Profile
February 09, 2018, 02:27:10 PM
 #1

Hi. When Im sending BTC i have 2 confirmations on the devices display. 1st - receive address and the amount. And the 2nd Im concern of. There are different address and another amount. After reading about the attack i havent send anything.

PLAY NOW
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
Lucius
Legendary
*
Offline Offline

Activity: 1260
Merit: 1074


Fortis Fortuna Adiuvat


View Profile WWW
February 09, 2018, 02:54:47 PM
 #2

Hi. When Im sending BTC i have 2 confirmations on the devices display. 1st - receive address and the amount. And the 2nd Im concern of. There are different address and another amount. After reading about the attack i havent send anything.

This is just your device ask you to confirm change address,it is normal in HD wallets to have change address.So when you send 0.01 BTC and you have in total 0.02 BTC,0.01 + fee will be send to address you pick,and rest will be send (free) on change address.I notice this few days ago first time in Electrum 3.0.5 in combination with Ledger Nano S.

From Ledger support is explained that sometimes as they say "minor bug" can cause such behavior on device.It should be safe,but since latest reports how easy is for malware to create receiving address in Chrome app,this is also represents a security problem.

https://support.ledgerwallet.com/hc/en-us/articles/115005469005-What-if-two-Outputs-are-displayed-Transfer-to-a-Change-address

bob123
Hero Member
*****
Offline Offline

Activity: 770
Merit: 741



View Profile WWW
February 09, 2018, 05:21:43 PM
Merited by DarkStar_ (2)
 #3

Hi. When Im sending BTC i have 2 confirmations on the devices display. 1st - receive address and the amount. And the 2nd Im concern of. There are different address and another amount.

As already mentionoed this is your change address.

This was a small 'bug' in an older version of the ledger nano s.
I would advise you to update your software.

Current versions:
Code:
Bitcoin Chrome: 1.10.1
Bitcoin app (on your nano s): 1.1.18
Firmware: 1.3.1



After reading about the attack i havent send anything.

The new "attack" is replacing your recieving address in the GUI of your application.
Ledger already has a workaround ready where you have to confirm your recieving address ony our nano S.

Note: The attack vector covers the GUI of your wallet. Not the wallet / the nano s itself.
Everything you confirm on your nano s can be considered as verified and safe.

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!