Bitcoin Forum
December 24, 2025, 05:59:52 PM *
News: Latest Bitcoin Core release: 30.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: « 1 [2]  All
  Print  
Author Topic: Wallet recovery  (Read 373 times)
nc50lc
Legendary
*
Offline Offline

Activity: 2996
Merit: 8171


Self-proclaimed Genius


View Profile
December 10, 2025, 04:29:10 AM
 #21

Hmm, these look exactly like the old version that I'm talking about. (word-per-word and UI elements)
Specifically v2.0 where it falsely creates 13 words and recovery windows was like that.

And using that version, I can reproduce the issues if I try to restore a recent electrum seed with SegWit reserved number (since it's not available at that time).

But since it shows v4.6.2 on your end, it could've been a lazy forked version of an old fake electrum,
the hacker may be too lazy to apply the recent updates or just incapable of making a new one from the original.

About the website, it's not impossible to setup something that'll redirect downloads/url from a legit site to a fake one.
e.g.: A simple sneaky proxy setting edit could redirect you to other sites or swap the url where you download a file; but it's not limited to that type of attack.

boombitty (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 1


View Profile
December 10, 2025, 10:45:20 AM
 #22

Quote
The image shows the mix of languages between English and German in your Electrum wallet, not in your web browser. You are confusing another point.

Yes of course, i meant the System language.


Quote
Hmm, these look exactly like the old version that I'm talking about. (word-per-word and UI elements)
Specifically v2.0 where it falsely creates 13 words and recovery windows was like that.

And using that version, I can reproduce the issues if I try to restore a recent electrum seed with SegWit reserved number (since it's not available at that time).

But since it shows v4.6.2 on your end, it could've been a lazy forked version of an old fake electrum,
the hacker may be too lazy to apply the recent updates or just incapable of making a new one from the original.

About the website, it's not impossible to setup something that'll redirect downloads/url from a legit site to a fake one.
e.g.: A simple sneaky proxy setting edit could redirect you to other sites or swap the url where you download a file; but it's not limited to that type of attack.

Thank you for this useful information!
LoyceV
Legendary
*
Offline Offline

Activity: 3892
Merit: 20744


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
December 10, 2025, 01:03:05 PM
 #23

Maybe it was a mistake to reinstall Electum? Hmm, although it didn’t work before either. That’s why the reinstallation.
That shouldn't overwrite your existing data directory.
Does this directory still exist and have wallets?
Code:
~/.electrum/wallets/
(to state the obvious: don't post them here!)

¡uʍop ǝpᴉsdn pɐǝɥ ɹnoʎ ɥʇᴉʍ ʎuunɟ ʞool no⅄
boombitty (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 1


View Profile
December 12, 2025, 02:25:58 PM
 #24

Quote
That shouldn't overwrite your existing data directory.
Does this directory still exist and have wallets?

No, not exactly like that. There is a directory called Electrum-4.6.2. I think there are wallets in there, but I’m not sure. What do wallet files look like?
LoyceV
Legendary
*
Offline Offline

Activity: 3892
Merit: 20744


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
December 12, 2025, 02:35:09 PM
 #25

No, not exactly like that. There is a directory called Electrum-4.6.2.
Any directory starting with a dot is hidden by default.

Quote
I think there are wallets in there, but I’m not sure. What do wallet files look like?
It's just a JSON text data file without extension.

¡uʍop ǝpᴉsdn pɐǝɥ ɹnoʎ ɥʇᴉʍ ʎuunɟ ʞool no⅄
boombitty (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 1


View Profile
December 12, 2025, 02:59:53 PM
 #26

Quote
Any directory starting with a dot is hidden by default.

Yes i know, they are visible at my system...
LoyceV
Legendary
*
Offline Offline

Activity: 3892
Merit: 20744


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
December 12, 2025, 03:22:05 PM
Merited by PowerGlove (1)
 #27

Are you still using the (weird!) Electrum version that creates seed phrases with 13 words? If so: start over! Something is seriously wrong!
How about downloading Tails OS from tails.net, start from USB or CD, use the Electrum it comes with, and recover your seed phrase from there?

¡uʍop ǝpᴉsdn pɐǝɥ ɹnoʎ ɥʇᴉʍ ʎuunɟ ʞool no⅄
boombitty (OP)
Newbie
*
Offline Offline

Activity: 11
Merit: 1


View Profile
December 12, 2025, 03:36:27 PM
Last edit: December 12, 2025, 09:45:12 PM by Mr. Big
 #28

No, i didn't start it again.

Quote
How about downloading Tails OS from tails.net, start from USB or CD, use the Electrum it comes with, and recover your seed phrase from there?

Yes, thats the next step. I already have a tails usb stick. I didn't know Electrum is included, makes it even easier


...and thanks for the support. Great forum! And sorry for being a bit rude in one post Wink



Quote
How about downloading Tails OS from tails.net, start from USB or CD, use the Electrum it comes with, and recover your seed phrase from there?
Posted on: Today at 02:59:53 PM

Ok. it was the solution. The wallet has been restored! It could have been so simple. But at least I learned something.

I still don’t understand what’s wrong with the Electrum installation on this computer... Better to uninstall it and always use another machine for electum. Whats the best way? Using tails for Electrum by default?
LoyceV
Legendary
*
Offline Offline

Activity: 3892
Merit: 20744


Thick-Skinned Gang Leader and Golden Feather 2021


View Profile WWW
December 12, 2025, 05:56:27 PM
 #29

Ok. it was the solution. The wallet has been restored!
Good for you!

Quote
I still don’t understand what’s wrong with the Electrum installation on this computer...
I can't telll you what happened, all I know is most of what you wrote didn't make sense.

Quote
Better to uninstall it and always use another machine for electum.
Just in case, I'd wipe the system and reinstall from a fresh Linux download.

Quote
Whats the best way? Using tails for Electrum by default?
Tails is mostly designed for privacy, but the pre-installed Electrum makes it convenient for this purpose. Depending on how much value you're storing, you may or may not want to look for a more secure setup (such as a Trezor hardware wallet). If it's $200, I wouldn't worry about keeping it in a hot wallet. But if it's a lot more, I'd change my setup.

Also: considering you may have entered your seed phrase in a wallet that may have been compromised, it wouldn't hurt to create a fresh Electrum wallet, securely backup your new seed phrase, and transfer your funds there.
Before doing that, read How to lose your Bitcoins with CTRL-C CTRL-V so you don't just trust CTRL-V Smiley

¡uʍop ǝpᴉsdn pɐǝɥ ɹnoʎ ɥʇᴉʍ ʎuunɟ ʞool no⅄
Cricktor
Legendary
*
Offline Offline

Activity: 1344
Merit: 3341



View Profile
December 12, 2025, 06:54:19 PM
 #30


Can you for a start read, understand and follow the Unofficial list of (official) Bitcointalk.org rules, guidelines, FAQ? You seem to ignore quite often the rule #32 for apparently no good reason except ignorance or not caring at all that this forum has rules which are there for a good reason. Without rules there'd be more chaos than necessary.

If the last post in this topic is yours and less than 24h old and you want to add something, then simply edit your post and append what you wanted to write. It's simple, no rocket science involved.

nc50lc
Legendary
*
Offline Offline

Activity: 2996
Merit: 8171


Self-proclaimed Genius


View Profile
December 13, 2025, 05:40:16 AM
Merited by LoyceV (4)
 #31

I still don’t understand what’s wrong with the Electrum installation on this computer...
It was working as Electrum v2.0 for some reason.
Identifying the issue will require you to check every nooks and cranny of your machine.

For example, if you've used that old version before and it's somehow being launched instead of the new version.
Or it's maybe a forked version of fake old Electrum (lucky that it wont accept new seed) that's easy to check via file signature verification (instructions), not just checksums.
etc.. etc.

If you don't have the time to check if it's the former example which is benign,
You may start with a fresh OS as suggested by LoyceV after you zero fill the disk if there nothing important in it.

Pages: « 1 [2]  All
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!