Ledger omitting one character from a Doge address

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: LoyceV on May 03, 2021, 02:37:06 PM

I haven't tested the same address yet, but I doubt it can be solved without a firmware update.

I managed to upgrade Nano S firmware version to 2.0.0, and then I did a test again with your address. I can confirm that the missing character is now showing correctly. The whole firmware update process is very fast and without any problems (W10), it took a little over 5 minutes in my case.

HCP

legendary

Activity: 2086

Merit: 4361

Quote from: LoyceV on May 03, 2021, 02:37:06 PM

I haven't tested the same address yet, but I doubt it can be solved without a firmware update.

I didn't see any real mention of bug fixes in the release notes but it would be interesting to see if it was solved in the new 2.0.0 firmware update... Huh

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: RickDeckard on May 03, 2021, 01:45:08 PM

@LoyceV have you had an opportunity to send Doge from your Ledger using Ledger Live?

I haven't tested the same address yet, but I doubt it can be solved without a firmware update.

RickDeckard

legendary

Activity: 1148

Merit: 3117

@LoyceV have you had an opportunity to send Doge from your Ledger using Ledger Live? I've noticed that the warning that appeared on the official support page[1] is no longer there, so I'm assuming that it has been solved? I haven't been able to confirm this, but since the posts complaining about Doge have disappeared from their official sub - r/ledgerwallet - (regarding this problem) I'm guessing that maybe it has been solved?

[1] https://support.ledger.com/hc/en-us/articles/115005174025-Dogecoin-DOGE-

suchmoon

legendary

Activity: 3654

Merit: 8909

https://bpip.org

Quote from: dkbit98 on April 19, 2021, 10:27:25 AM

This is what their co-founder and ledger reddit moderator btchip has to say about this issue:

Yeah sending a shill labelled "co-founder" to spread false information on social media is not the smartest thing to do when you have a problem but Ledger isn't really known for doing smart things lately.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: suchmoon on April 19, 2021, 09:34:54 AM

Reading some of the comments on Reddit it sounded like people were complaining about not being able to send coins, and not so much about the address showing up incorrectly on the device.

But who knows, what with Ledger trying so hard to avoid explaining what the issue is and what to do (or not to do) to prevent it.

This is what their co-founder and ledger reddit moderator btchip has to say about this issue:

Quote

AFAIK there are no issues with Doge for the time being

https://www.reddit.com/user/btchip/

He is obviously not informed what is written on ledger website, he is ignoring many complains on their reddit page, and last step is probably banning and muting people.

suchmoon

legendary

Activity: 3654

Merit: 8909

https://bpip.org

Quote from: LoyceV on April 19, 2021, 09:22:07 AM

Quote from: suchmoon on April 19, 2021, 07:40:30 AM

So... it's a display bug in their "UX library" but apparently it results in an invalid transaction.

It could have been rejected due to my the low fee, I have no idea what the minimum is for Doge. Ledger surprised me with a default fee of more than 2 Doge for one input and 2 outputs.

Reading some of the comments on Reddit it sounded like people were complaining about not being able to send coins, and not so much about the address showing up incorrectly on the device.

But who knows, what with Ledger trying so hard to avoid explaining what the issue is and what to do (or not to do) to prevent it.

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: suchmoon on April 19, 2021, 07:40:30 AM

So... it's a display bug in their "UX library" but apparently it results in an invalid transaction.

It could have been rejected due to my the low fee, I have no idea what the minimum is for Doge. Ledger surprised me with a default fee of more than 2 Doge for one input and 2 outputs.

suchmoon

legendary

Activity: 3654

Merit: 8909

https://bpip.org

Quote from: LoyceV on April 19, 2021, 04:51:49 AM

They responded (as promised within 24 hours):

So... it's a display bug in their "UX library" but apparently it results in an invalid transaction. That sounds a bit contrary to how I thought a hardware wallet is supposed to work.

I thought it goes like this - you build a TX (e.g on a phone or a PC), send it to the device, it shows the receiving address, you confirm it, the device signs the TX. Why is the device allowed to change the output script?

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: dkbit98 on April 18, 2021, 04:24:37 AM

Oh...good luck with that, it's time to pop a champagne bottle.
You should expect to receive stupid generic automatic machine answer and experience their terrible customer support.

They responded (as promised within 24 hours):

Quote

Hello Loyce,

Thanks for the bug report. After internal discussion with the firmware team, it appears this issue was already reported through several customer support tickets.

For technical details, the address to be displayed is split in a number of pages depending on the maximum character width. The bug occurs only on some addresses, when the sum of each character width is larger than a threshold. This width used to be hardcoded in the UX library and there was a bug in the related algorithm.

A fix is ready and will be made available in the next version of the SDK, which will happen during the next Nano S firmware release (the Nano X isn't affected because the UX internals are slightly different).

Best,
The Ledger Security Team

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: LoyceV on April 18, 2021, 03:35:34 AM

I've sent Ledger an email, now we wait Cheesy

Oh...good luck with that, it's time to pop a champagne bottle.
You should expect to receive stupid generic automatic machine answer and experience their terrible customer support.

Just now reading on their reddit page that other altcoins like Vertcoin also have some issues with ledger.

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: Pmalek on April 17, 2021, 05:18:12 PM

Can you recreate the bug when you generate new receiving addresses or when you try to send to any random Doge address found on the blockchain?

Probably. I expect it to take some trial and error, but haven't tested other addresses.

I've sent Ledger an email, now we wait Cheesy

Pmalek

legendary

Activity: 2730

Merit: 7065

In all my years with a Ledger wallet, I have never seen such a thing. I don't have Dogecoins on my Ledger device, but I thought I would be able to create a 0-value transaction and get to the confirmation screen to have the address displayed on the device. After installing the app and adding a Doge account, it unfortunately didn't work. The continue button is only clickable with a valid balance.

All I could try was to generate a new receiving address and compare the one in Ledger Live to the one displayed on the screen of my Nano. Both were identical, there were no missing characters. Can you recreate the bug when you generate new receiving addresses or when you try to send to any random Doge address found on the blockchain?

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: suchmoon on April 17, 2021, 10:00:05 AM

I'm still confused by this. If it's a Ledger Live bug, wouldn't the address be wrong on any device? Or do you two use different Live versions?

I have the latest version available (2.25.1), and LoyceV claims to have also made an update recently, so I guess we use the same Ledger Live version, but a different device.

Quote from: suchmoon on April 17, 2021, 10:00:05 AM

Which part (Live or the device) is splitting the address into multiple lines for display? I was assuming it was the device doing this, and dropping one character - seemed like too much of a coincidence that this specific character position on the boundary of two lines is missing.

When it comes to Nano S, due to the size of the screen, it is not possible to display the address at once, but what exactly causes the address not to be displayed correctly at this time we cannot say. Maybe LoyceV has problematic (old) firmware that is combined with current Ledger Live and problems that Ledger has currently with Doge.

Edit:

I found my Nano S and tried to reproduce the same error when displaying the address, and I can confirm that the (w) character is really missing. Since I couldn’t reproduce the same thing on the Nano X, we can conclude that something is wrong with the Nano S combined with the current Ledger Live.

dkbit98

legendary

Activity: 2212

Merit: 7064

Quote from: LoyceV on April 16, 2021, 09:28:23 AM

I don't think it's caused by an exploit, and I expect a missing character to result in an invalid address. My hope is that it's just a display bug on the Ledger, my fear is it's creating an incorrect (and invalid) transaction.

I heard about similar problem with Bitcoin addresses on ledger that was cause by some malicious program that was changing only last four characters on bitcoin address to steal funds, but right now I can't find the source of this information.

Ledger reddit page is full of posts with people complaining and asking where are their coins, but have you seen this doge page on ledger wallet website?

Quote

We are currently experiencing some difficulties with DOGE transactions in Ledger Live. As far as we know, there isn't a third-party compatible wallet that you could use in the meantime. Besides, when you make DOGE transactions, make sure to not mistake your Dogecoin (DOGE) address for your DigiByte (DGB) address. DOGE addresses start with a capital D whereas DGB addresses start with a capital S.

https://support.ledger.com/hc/en-us/articles/115005174025

suchmoon

legendary

Activity: 3654

Merit: 8909

https://bpip.org

Quote from: LoyceV on April 17, 2021, 08:36:50 AM

I did upgrade Ledger Live recently. That would mean Ledger Live omits a character when sending the address to the Ledger device.

Quote from: Lucius on April 17, 2021, 09:23:49 AM

I tried it on my Nano X, and the address you have a problem with is displayed correctly on my device - The Nano X at least has a larger screen so the entire address can be displayed at once.

I'm still confused by this. If it's a Ledger Live bug, wouldn't the address be wrong on any device? Or do you two use different Live versions?

Which part (Live or the device) is splitting the address into multiple lines for display? I was assuming it was the device doing this, and dropping one character - seemed like too much of a coincidence that this specific character position on the boundary of two lines is missing.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Quote from: LoyceV on April 17, 2021, 08:36:50 AM

If you can verify the bug by creating a test-transaction (no need to broadcast it, just reject it on the Ledger), that would be much appreciated.

I tried it on my Nano X, and the address you have a problem with is displayed correctly on my device - The Nano X at least has a larger screen so the entire address can be displayed at once.

Quote from: LoyceV on April 17, 2021, 08:36:50 AM

Unless it's fixed already in the latest firmware, but I'm always afraid to upgrade those.

In the worst case, it can happen that you brick your hardware wallet - but I think that happens very rarely. Yet those initial problems that have occurred with Ledger firmware should be a thing of the past - this process is now much more painless and faster - unless you are using some old OS like Windows 7.

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: HCP on April 16, 2021, 11:17:21 PM

Is it a repeatable bug?

I can repeat it, but only with 1 out of the 2 addresses I've tried. This is the address:

Code:

DMv1UW6d2vXUqNGw7YZyXjPEx959wM2FEN
               ↑

This is what it looks like on the Ledger:
Image loading...

If you can verify the bug by creating a test-transaction (no need to broadcast it, just reject it on the Ledger), that would be much appreciated.
There's a firmware update waiting, but I haven't installed it yet.

Quote from: Lucius on April 17, 2021, 08:16:06 AM

Ledger has announced that there are difficulties with Doge transactions in Ledger Live, perhaps this is the reason that the addresses in Ledger Live and Ledger devices are not identical.

I did upgrade Ledger Live recently. That would mean Ledger Live omits a character when sending the address to the Ledger device.

Lucius

legendary

Activity: 3234

Merit: 5637

Blackjack.fun-Free Raffle-Join&Win $50🎲

Ledger has announced that there are difficulties with Doge transactions in Ledger Live, perhaps this is the reason that the addresses in Ledger Live and Ledger devices are not identical.

Quote from: https://support.ledger.com/hc/en-us/articles/115005174025?input_string=doge+transfer

We are currently experiencing some difficulties with DOGE transactions in Ledger Live. As far as we know, there isn't a third-party compatible wallet that you could use in the meantime.

More info here - > Send DOGE with ledger live to exchange but does not get sent.

HCP

legendary

Activity: 2086

Merit: 4361

Quote from: LoyceV on April 16, 2021, 08:32:07 AM

I'm just posting here for latere reference.

Is it a repeatable bug? Huh

Or does it only do it with particular address? Kinda seems like the sort of thing that should be highlighted to Ledger support and/or logged on their issue register.

Topic: Ledger omitting one character from a Doge address (Read 363 times)