Topic: A loaded Ten bitcoin Casascius silver gilt coin in orig. case + some brass 1s (Read 996 times)

Wow...okay let me first start off by thanking you and Krogoth for such detail. I honestly thought I had it all worked out prior to this and had spent quite a bit of time on this a while back just to try and learn how to construct a transaction, then be able to sweep or get the BTC off of it first then go back and retrieve any forks or airdropped coins that may be on that private key. However after reading this and letting it sink in more and more the more I'm realizing I have to do much more work here and I have to absolutely learn to be more secure because you're both 100% correct in the thinking of yeah sure you might be fine doing it the way I had learned so far but why take the risk if I don't have to and I can do it SO MUCH more securely. So thank you to the both of you and again good luck with your sale. No worries on the pics. The suspense is building plus I have some learning to do! Cheers and Happy Holidays to all!

iBHK8

I fear there may be a misunderstanding here of the process Krogoth and I are advocating. It is not my place to tell anyone what to do or not to do; nor what anyone's risk tolerance ought to be. And I'm going to risk sounding patronising here by getting a bit preachy in the hope you and / or others who see this don't jump into doing this stuff, get it wrong and get robbed.

But above in this thread (here...


... as well as in this post: https://bitcointalksearch.org/topic/m.55893024 )

...and, I suspect, in countless other threads and videos and books about the basics of Bitcoin, there are processes devised, tried and tested to handle and to use private keys securely. If dealing with anything more than what to you is 'loose change', I highly recommend not only following these processes but also taking the time and effort beforehand to understand what a transaction consists of; what is required to prepare a transaction, how most of the process can be separated from the vulnerable bit (i.e. its signing). Because once it is understood, you will be able to see why what may initially be a daunting many-step processes is necessary; you can follow the purpose of each step and where it belongs in the process; you can get a better appreciation of the design of Bitcoin and the transaction-creating process. And when it's safely done, when you did it, you can get the satisfaction not only of knowing that the funds are safe but also from knowing that, by following an understood step-by-step that you will have consolidated that knowledge by carrying it out yourself. And, as remote a chance as there may have been (see below) that the online machines were compromised, you will know that it was all done without there being a need for a 'hold-your-breath-and-hope' moment when there was a risk of losing the coins*. (The process of using a hardware wallet will also make more sense to you if you hadn't already gotten what that process consists of.)

/soap box rant

I think there may be confusion here arising out of a more generalised use of the word 'sweeping' i.e. 'to have moved the funds from a wallet' and the technical term (and the sweeping function in wallets). As far as I understand it, it is not possible to technically sweep a wallet without the wallet being able to ascertain the 'available balance' from the blockchain therefore not possible to do on an air-gapped machine which, by the processes recommended by those who understand, is the only place you want your private keys to be until the BTC balance is safely elsewhere.

Just to be clear, the use of a hardware wallet with Electrum (or with whatever software) is separate and outside the scope of this discussion (unless we extend it further   ). For our purposes, all you need with respect to your hardware wallet (if that is to be the destination of the funds you're moving from the Casascius coin) is that you need a verified address for that wallet. In other words, your hardware wallet will be set up with its own seed words and you just need a destination address for that wallet in order to prepare the transaction that will be signed by the physical coin's private key.

The use of Electrum (for the on-line machine) with respect to moving the balance from the physical coin is as a 'watch only' wallet whereby when setting it up, instead of inputting private keys (as you would to restore a low-value wallet with some funds on), you input only the bitcoin address (the part that was visible prior to peeling the sticker off). This enables that wallet, once you've put in the destination address, to find the balance on the blockchain and figure out how much 'max' is in order to create the transaction that you'll be signing on the air-gapped wallet. But I think we're going round in circles by now. I don't think I have any more to add on this process that hasn't already been said or isn't in the resources Krogoth kindly linked to.

I think Krogoth answered that one well.


The risk is simply that malware on a connected machine could potentially use your private key to move your BTC to their address quicker than your sweeping process does.


You're now asking to quantify risk which is a whole other ballgame. The odds that this could happen vary enormously with each circumstance and would be very difficult, even for a security expert, to ascertain without knowing what devices / OS you're using, what else they're used for and since when, whether you use the same device (or accounts also associated with that device) to send communications relating to cryptocurrency, how good your opsec is etc. etc. Without knowing how big an 'I own crypto' bullseye sign you've digitally drawn on your back, it's impossible to tell what the odds are. But why take that risk if you have an opportunity both to carry out this process without taking that risk and in the process, to progress your learning of what this technology is about?


All good. At least this convo is keeping the thread alive while we're waiting for these photos  

*You may even find the process so satisfying that you want to go through it again using Electron Cash for BCH, Electrum SV for BSV before using the simple one-step process in Ballet or Coinomi for anything else.

Interesting! I've never had any issues with either Ballet or Coinomi when sweeping. They both make it super easy. Not sure why that happened to you. Would love for others to give some of their feedback when they've swept. The more knowledgeable everyone is the better in that department.

I know I keep saying this but all I need now is for Ballet to allow the end user to select which fees they wish to pay upon sweeping/importing a private key. Coinomi allows for this feature whereas with Ballet it's one set fee and it's take it or leave it. If they changed that and allowed for us to be able to select low, economy, high and or a custom fee slider option I think Ballet would be the best way to go for quicker and smaller amounts no doubt. Possibly even larger amounts just depending on the person etc....

EDIT: After reading your message again I think the best way to go is to hook up Electrum to a Trezor or a Ledger(whichever you prefer or any other HW wallet out there) then once it's connected to Electrum sweep the BTC first and foremost. Then go back and use Ballet or Coinomi for the forks and rest that may or may not be sitting on that private key. Snagging the BTC is obviously paramount! I'm actually glad we all got into this discussion here again because I believe it's worth discussing from time to time. Sorry for hijacking the thread and good luck with the sale(s) Thoughtfan! I'm rooting for you and your friend!




iBHK8

I input the cas mini key in the app import, and it just was stuck in sweeping mode. I then converted the mini key to a wif key on bitaddress and tried it that way as well, and it did the same thing no luck. On exodus it worked first try with the mini key. I have imported paper wallets on there no problem it works instantly maybe the app is in the process of being updated or something I'm not sure why it didn't work.

Gotcha! Thanks Krogoth. Yeah I remember that thread you posted. Was an amazing post as usual. I've always wondered about this hence why I kinda set out to learn and continue to learn as software updates and changes came to our world. I want to know and learn as much as I can so I know in the event I have to peel I get what I own. I do need to run some other smaller random tests just so I can really be sure I know what's up etc....Will keep everyone posted if and when I do run some other tests other than a Satori and let the community here know the results step by step!

iBHK8

        The race against time he refers to is as follows...

        If for some reason you have a virus or malware specifically engineered to be able to copy your mnemonic or paper wallet...or and private key...then they can literally beat you to sweeping your coins before you do. So why take that chance when you can sign it safely offline first? Especially with a 10btc coin. Better safe than sorry

         There are also malwares that send your btc to a different address...they switch the addy at the end.

       https://www.zdnet.com/article/innfirat-malware-lurks-in-your-machine-to-steal-cryptocurrency-wallet-data/

        https://www.coindesk.com/malware-miners-torrents-passwords

        Here is a thread of a different way to carry any btc you plan on sending without actually having the btc on your hot wallet.
        I used to use this method when i met people in person and didnt want to carry the btc on my Mycelium wallet
      
         https://bitcointalksearch.org/topic/how-to-generate-a-signed-btc-transaction-using-electrum-and-trezor-5106013

         Also make sure you download the real clean Electrum

         https://coingeek.com/hackers-steal-over-22-million-via-electrum-wallet/

        

Yeah Coinomi I've found to be super easy and again it allows you to set the import/confirmation speed/fees. However I've also only ever used a Satori chip for my trials. I need to try this on some other items. Specifically Cas and BTCC as that's what I mainly hold. I'm a bit surprised that Ballet didn't work. Did you ever find out why it didn't work? What kind of errors you received etc...?

iBHK8

Coinomi as well here for forked coins...then to exchange to btc as well.

I tried to import/sweep a casascius on the ballet wallet app it didn't work for me. Exodus worked for me for the btc then I used coinomi to claim the forks

Thanks for your input on how you sweep the BTC then the forks afterwards once the most important BTC is swept and secured first! Can you or anyone else in here let me know their thoughts on that very risk you describe above regarding it's just a race to get your BTC off your phone and onto a HW wallet? I mean let's say I use Ballet or Coinomi what are the actual risks vs doing it the way you described above? I have no doubt your way is likely more secure but for any security experts in here how much more secure would that way be?

PS: Also at this very movement in time I'd have to go with Coinomi for the BTC as they allow you to set the fees and I'd obviously set them higher for the need for speed but even Coinomi's faster fees is much cheaper than Ballets one size/speed fits all unless they have updated this in their software allowing for us the owner of the Ballet cards to select which fees and how much speed we need a sweep done. Because I do feel Ballet would be more secure given the fact it's a more colder of a wallet than Coinomi just being a straight up hot wallet(a great one but still a hot wallet nonetheless). Would love any and all thoughts!


PS: Thanks for video Krogoth....will watch that soon as I want to learn as many ways as possible!
iBHK8

Here is an excellent step by step video of what you just covered...completely agree to never have private key exposed to any hot wallet.


Securely Withdraw a Bitcoin Paper Wallet: Offline Signing with your air-gapped Phone via Electrum

Hi, thanks for your interest and sorry for my late response.
Regarding 'sweeping' or sending, it's something I've done many many times - for myself when they were low value but also more recently for friends.

I would agree with iBHK8 to use something like Ballet for the forked coins, 'airdropped' stuff etc.

However, I would first - cautiously and with very well considered steps beforehand - send your BTC to a hardware wallet address then only aftwerwards to go play with the BCH & small-fry other stuff.

I don't know if it's possible to 'sweep' without exposing the private keys online so the way I have talked people through doing it is with an out-of-the box £200 air-gapped (wifi off from first start-up) laptop with electrum installed on it from USB stick. Then with electrum also on your connected computer, you can set up watch-only wallet on that one, inputting the public key which will enable you, with the wallet able to read the blockchain, to prepare the transaction (the amount (max), the send-to address and the fee). Then you need to export the unsigned transaction and take it (either on USB or by QR code) to the air-gapped machine to import, sign and export again. You can then, with the signed transaction, input it back into the electrum on the connected machine and broadcast.

There are many variations on this theme with various degrees of security. It is essentially the same as safely spending from a paper wallet and you'll find many processes for that - some with illustrations etc. The critical thing is to remember is that until the signed transaction is broadcast and has been confirmed, you don't want there to have been *any way* the private key could be accessed by anyone (or some malware that will help itself to your funds). (Scanning the QR code to an app on your connected phone to sweep your BTC, for instance, can become a race between your legitimate app sending you the funds and malware on your phone sending them to someone else)!

That's funny    My apologies all. I was expecting some photos over the weekend but nothing*! I just passed on this message and they were suitably embarrassed by their inaction. Hopefully tomorrow! Thank you for your patience.

* I highly suspect had they spend a little less time chart-watching willing the price up (I know it well myself ), they might have gotten round to taking the photos!

Interesting, thanks for sharing

Well don't worry by the time we get pics of any of these including the 10BTC, BTC might just be 100k  . As for sweeping here you go bud...

https://bitcointalksearch.org/topic/--5274279

iBHK8

I'd be interested in the 10btc, although not sure on the premium when thinking about it in terms of fiat. Will probably be hard (and not worth the risk) to sell even a 1btc Cas once BTC hits $100k+. On a side note, what is your recommended method to friends for sweeping the physical coins? Always like to hear about different methods. Thanks

Interesting side-topic of the pros and cons of grading thanks. My tendency is to get it graded and encapsulated if I can find a way of doing it that is fairly straightforward because I understand the merit of that. Nevertheless, if it is too much of an issue, I'll sell it without. I was speaking to the owner who said she can only remember a few times when it came out of the openable capsule it came for the joy of feeling the coin in your hands (once was when I was visiting so I got that pleasure too). Some proper photos will be done but my guess if not strictly mint (as in handled with gloves etc), it won't be far off it. Buyer may then, if they wish, pursue encapsulation to ensure no deterioration.

Have a good weekend all, tf

Agree completely, i dont even consider purchasing ungraded, ok rarely lol

I'm literally cracking up at the fondling coins statement. Just sounded funny.
Just as a FYI, I like to do both. Fondle them until I get them to you for grading 
Cheers all!

In my opinion the safety and security that comes from capsulation FAR outweighs this joy of fondling coins. ¯\_(ツ)_/¯