Topic: Bitcoin not arrived / Ledger S / Electrum / Help me. (Read 350 times)

If your friend didn't send it or didn't ask anyone to pay him to that address then that is really concerning. Imagine how lucky you would have to be to receive free 0.1 BTC. I am sorry but it will seem to be someone else's address if your friend says that he doesn't know anything about the fourth transaction.


Still, this quote concerns me. The story doesn't add up. If you could see all the transactions then you should also had all the addresses. They shouldn't disappear on their own.

Hello. Yes, you are right. I can see 4 transactions on this adress (bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567) too. The fourth with ~0.1 BTC was not sent by me.

This adress i can find in his electrum wallet: bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg.
So this amount send by me he recieved.






Yes, i have tried it with BIP84 and i get all the private keys with the bc1 adresses, but i cant see the missing adress and not the belonging private key.
Yes, he is my best friend, we trust each other.

Did you mean, the seed phrase, not private keys alone?

Those are legacy addresses, you have to select the proper derivation path to derive the Native SegWit addresses.
For iancoleman's BIP39 tool, select BIP84 tab.

So you have access to your friend's keys, he must be a very close "friend" to entrust you his keys.
But the post above about "ismine: false" is the answer to your question, and I second it.

I don't think he is in control of that address either. You mentioned that you sent a total of 4 transactions. Three to that address and one to another one. However, I can see a fourth transaction in the missing address. Another ~0.1 BTC was sent to bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567. Was that transaction sent by you?

What about bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg address? You claim that your friend could see the transaction received to that wallet. Did you manage to find that address in one of these 10 accounts?

Hello, yes i mean this tool from coleman, i use it offline. Thanks, so i tried it with BIP84 like you said and now i can see all the adresses with bc1, but the Adress where i sended the funds to (which we are missing) bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567, is not there. I am right that this is also a explanation / proof that he is not the owner of the this adress? I tried account from 0-9. My way is, trying to find the private keys for this Adress bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567, so maybe i get a clue if he is the owner, but i cant find the private keys, so for me it looks also like he is not the owner. I dont know where are the coins, i have no explanation, except he is not the owner and make failure during copy & paste, but this never happened to him....

Are you referring to this tool? If so then first of all, you should use the offline version without the Internet connetion. Never enter your recovery phrase on any online website. Once you recover your friend's funds, create a new wallet using Ledger and send the coins there. You should be also be careful when entering the seed on a computer since it could be infected with some malware. Having said that, never enter your seed anywhere unless there is no other choice.

If you tried to use this particular tool to generate your addresses then you should have also modified the derivation path after entering your seed. Under 'Derivation Path', there are a few buttons (BIP32, BIP44, BIP49, BIP84, BIP141). Select BIP84 and you should see addresses starting from bc1. You can also easily modify the account number under that tab.

Hello everyone, thanks for helping me.

nc50lc

To answer your question: I have no log, but i made an screenshot of the adress.
I can confirm that the characters are exactly the same.
I can confirm that nobody is infecected. I take a lot of transactions every day with
my electrum and everything is fine. My friend is also not infected, i tried it
with copy-paste random adresses and before everything was fine to.

Friends. Today i tried to export my friend private keys with the BIP39 tool.
When i do that, i get this adresses (all private keys starts with L + K)

Adresses:

14iHnGKkqsdM3NykGVpVjKh6vzAUtrgvfg
1PR2qjouLzFG4kN7MxSDieoPKv27f5s3KF
1MbrPiPEc6ejTyMuDyetVjG8ukTD944MhV
1F8rZ2HUfDm5cL7XkZ8tbKhb4xvgQGzfTf
17sEzjjMAi9H2nt5DwPL13GYDvC7ZekC3V
1PW2wFKxEjZ3wW9EJeRktmxNx72LU4gnua
1J4TkMr855PT78sSmNXQBSaiH5Gyz9EYfR
1PLxESd4FiDZvGrki9AFidudtMwabdMesx
1HT3jeTGdB82Vtma3ogeRKnEBppyrahNGJ
1FbCqvgzJyJjH2FuQ45xerFGj3UxtpDQDj
1PSK6ZaiVKKctHXk41tWDF5qfNRmjr8hca
13QrhvjJuCqjkomTYGqzYUeyyJASEMMsuB
18Fed1Xup8Sf54zgLh9K5LcTzq3qHdhRPz
18iwJw4QTYVo7XcayiXAhvCLutCkY8q9Yb
17Gsw3fZFsyTqC6ChJPZDbkDxyU9qYpDbr
163Agjius6UQCTDWKZVMX7WLcakRWnoLcM
1GjQZnhivUCaYMKzU6w9XuPsr9ajsvLs3t
1CbPz91QftfXKAoxNCRkoHSvBieXVES6xg
1DPrv1uU18ZswG3neqWonzv6FDYi1jm4ok
13xfUfuzyLxPhAPbfC8Bf3ffcijG7XAsoB

The adress where i sended the bitcoins (bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567), is not there. ), is
not there. Is this also the proof that he isnt the owner of the adress? Since HCP told me, there is no need to confirm the Adress in ledger, i am not sure  again what happened here.

But also i cant find the private key of this adresse there (bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg),
but thats the Third Transaction which My friend recieved.
https://blockstream.info/tx/14210edd41e629264106f90470a1cff9fd870c391fa4094a93a4fba7e11f2d53

I mean, the BIP39 tool should display the private keys to this adress too, right?
So both adress starts with bc1 are missing on BIP39.

Maybe there is something wrong?

If anyone can fix this, i can donate 500 Euro to the board wallet.
You can also contact me with PN / telegram / wickR.

Have you guys more ideas?
Kind regards and big THANKS

The address in question is bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 and you've tried to send bitcoins to it three times.
The second and third attempts were a waste of funds.

My initial question is still unanswered, as the matter of fact, you can potentially solve this by answering them,
unless he already cleaned his PC or the malware is designed to self-destruct after a period of time.

Quoting myself:

If the address on the ledger device screen, matched the address he was shown in Ledger Live, then he should be "OK".

Note that clicking "approve" on the device doesn't actually do anything... It is just there as a sort of trigger to try and make the user take the time to actually double check that the 2 addresses do in fact match. You don't need to click approve to be able to receive coins.

You can in fact get a "receive" address from Ledger Live without even having the device connected, although this is NOT recommended (as you cannot confirm that Ledger Live is giving you the correct address! )

That's what i think too.




This confirms the assumption that your friend is not in control of the address.




Well, he obviously gave you an address which does not belong to his hardware wallet.
So he either..
1) gave you a different address on purpose,
2) is infected with some kind of malware (e.g. clipping board changing malware) or
3) copy/pasted the wrong address.

khaled0111

Hello. Can you please tell me where i can export my privat keys for testing? Which other wallet do you recommend? Thanks!


nc50lc

„When you said wallet, did you mean the same address or another address from the same wallet?
Because sending to the same address which didn't went though is a pointless test.“

Let me explain please:

First Transaction was this one [My friend did not recieve this one].
https://blockstream.info/tx/2b649c7be09b2d53ea9245bf7f8051ed2f721d41045c6b9fce98020aef4ce75c
Adress: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567

Second Transaction was this one [My friend did not recieve this one].
https://blockstream.info/tx/5356b5595824ef9b58b8b806290281acec577b22b169511254f014de3aa3cef9
Adress: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567

Third Transaction was this one [My friend recieved].
https://blockstream.info/tx/14210edd41e629264106f90470a1cff9fd870c391fa4094a93a4fba7e11f2d53
Adress: bc1qefs2d4ck8mw68l24r9w7y2nwy7t3nkt43fw5pg

Fourth Transaction was this this one: [My friend did not recieve this one].
https://blockstream.info/tx/b655633c8d3f7f67be843dfa067a536c9ff61dcfaefff13b44893b479156291f
Adress: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567

For me it looks now like he is / was not the owner of the adress.
What you think?


--

Do you have a log of your conversation where this address is written?
If so, confirm all of the characters if they are the completely the same.

Yes, i have the log and screenshot. My friend gave me this adress, its 100% correct.

bob123

I believe that the address might actually not belong to the wallet of your friend.
Since you already imported the seed from the hardware wallet into electrum, try the following (within the wallet file where all addresses start with bc1..:
•   Go to the Menu: View -> Show Console
•   Go to the Console Tab
•   Enter this: ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")

If it returns false, it seems that this address indeed does not belong to your friends wallet.
The most probably scenario here is that either you or your friend is infected with some kind of malware.
Another option would be that he is trying to steal some coins from you by giving you a different address.

I tested this, consale gave this output:

 >>
You are connected to an ElectrumX 1.14.0 server.
>> ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")
false
>>


He dont want to steal something from me, also no one ist infected.


Abdussamad
Electrum 3.3.8

HCP
Bitcoin 1 (native segwit)

BitCryptex
This was my error today, i forgot to enter one word from the seed, now i can see the transaction from the paste, but not the one where are missing, ,the one which i sendet to: bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567 (0.39 BTC)

I can see the other transactions on the watch only wallet, so i guess 99,9% he was / is not the owner of this adress. Thats my only explanation at the moment. I think he logged into ledger, clicked on „revieve“, then he put unlocked the ledger, copied the adress BUT dont confirmed it on the ledger in the last step, so the adress was not confirmed for him. Do you know what i mean? I have no other ideas now. I tried everything you told me.

Anyone has another Idea with this new infos from me?
Can my explanation be right (not the owner, because ledger not confirmed)?

Thank you all,
have a nice day

Keep in mind that before modifying the derivation path, you need to select the type of address (in your case native segwit p2wpkh). You can try modifying the last number of the derivation path to see if you have used a different account by an accident. So, after selecting the correct type of address, try m/84'/0'/0', m/84'/0'/1', m/84'/0'/2', m/84'/0'/3' .


Still, it sounds like a synchronization problem to me. Can you see a green dot in the bottom-right corner of Electrum?

Hello everyone,

thanks for your help. Im talking for my friend here, i try to find the coins for him. No Hijacking, not Scam, he dont want to steel coins from me.


I want to answer all your questions and want to try all your tipps, but today / now i wanted to add my standart wallet with my seed (BIP 39 Seed Option in Electrum) again. This is native segwit (p2wpkh) on m/84'/0'/0' path. Now there there are NO transactions anymore in overview now, lol.

1.) I have added standart wallet with my seed (BIP 39 Seed Option in Electrum).
This is legacy (p2pkh) on m/44'/0'/0' path.
There are no transaction in overview.

2.) I have added standart wallet with my seed (BIP 39 Seed Option in Electrum).
This is p2sh-segwit (p2wpkh-p2sh) on m/49'/0'/0' path.
There are no transaction in overview.

3.) I have added standart wallet with my seed (BIP 39 Seed Option in Electrum).
This is native segwit (p2wpkh) on m/84'/0'/0' path.
There are no transaction in overview.

On friday i could see all the transaction, i think i have a problem with the derivation path, but i am not sure.

Does anyone know how i can fix this problem first, then i can go on with your tipps.

In your friend's Ledger Live, when he clicks on "Receive" (to get a receiving address)... Which of the following 3 options is the "Account to Credit" listed as? :

- Bitcoin 1
- Bitcoin 1 (legacy)
- Bitcoin 1 (native segwit)

what version of electrum are you using?

Highly unlikely, because:

• OP's friend is using ledger's software (no weird derivation paths)
• They imported the seed into electrum using all 3 standard derivation paths
• The address originally was retrieved from ledgers software (so no weird index outside of electrums gap limit)

I believe that the address might actually not belong to the wallet of your friend.
Since you already imported the seed from the hardware wallet into electrum, try the following (within the wallet file where all addresses start with bc1..:

• Go to the Menu: View -> Show Console
• Go to the Console Tab
• Enter this: ismine("bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567")

If it returns false, it seems that this address indeed does not belong to your friends wallet.
The most probably scenario here is that either you or your friend is infected with some kind of malware.
Another option would be that he is trying to steal some coins from you by giving you a different address.

When you said wallet, did you mean the same address or another address from the same wallet?
Because sending to the same address which didn't went though is a pointless test.

Do you have a log of your conversation where this address is written?
If so, confirm all of the characters if they are the completely the same.

Perhaps you or your friend has been infected with a clipboard hijacking virus.
If the log from my question above isn't the same as that address, I'm afraid that you're the one who's infected.
If it's the same, then your friend is the one who might be infected, try to confirm it by telling him to copy-paste random addresses.

you have to send the coins from "bc1qj50q40uugqq23pz2nxgey3u2f0lphy3ls4x567" not from your main wallet. If you own the receiving address (the one you are going to send coins too) then there is nothing to be afraid of  

please do it then report back.

He won't be able to spend all of these coins. Electrum will be missing information about UTXOs which are needed to sign a transaction.

@OP It seems to be a problem on your side. I have tried to create a watch-only wallet in Electrum with your address and I can see all transactions. Try using a VPN. Also, you should be careful when moving your private key around. Do not import it to any random wallet.