Topic: Multibit bug, i lost my btc (Read 5081 times)

To be honest, the fact that you're accusing them of stealing and in your own words "starting a war" might have a lot to do with how they're responding to you. 

FWIW, you can also make your own donation page.

I'm just pointing out again that the license for this program says in all caps that it's provided as-is, with out any warranty and that you use at your risk. Tossing accusations and "starting a war" isn't going to make people feel very sympathetic to you.

Finally, it looks like they haven't ignored you at all. Didn't they take the time to do a forensic analysis of your wallet (one that you apparrantly don't know how to do for yourself).  I'm just saying, you might catch more flies with honey....

Can you upload the full 1GB log somewhere (zip/rar it) so we can all see the activity to be sure it started in October, because if it did, I don't know why they'd claim April if it's not in the logs.

https://github.com/jim618/multibit/issues/661

yesterday i e-mailed them.
no answer yet :|

Then mail them their forensic report is wrong, as you used MultiBit for the first time in October. And if there is no import private key log from October 2014 - January 2015, then it's obvious you did not use the import feature to mess this up, and there is another bug in MultiBit.

I know that , but when you create a program like this ( an open-source ) and clients ask you about a problem , you will try to help, no?
This is my problem here , i know ,my btc are blocked there forever but when i see that they ignore me and ignore this problem i have the right to be upsad and start a war with them.
They can simply, because is a open source , open an donation page in multibit to raise money from the fake adress and give back
I think an open source is based on donation of the community and if they create a donation page for this problem i think the community will understand .
But they dont care . I have more ideas like them but when you write 3 pages with ideea and they respond in 2 words is normally to be upsad .
My solution : Create a donation page for the users that have problem with this bug .
Thx

You can be 100% sure they didn't steal your BTC, those coins were sent to a Bitcoin address that can never be spent. It was caused by a bug in multibit. This is really bad IMO, and the multibit guys should be doing everything they can to find this bug, but it seems like they are simply ignoring it.

I'm sorry to hear this happened, but there is nothing anyone can do to get the Bitcoins back, they are "stuck" in the blockchain forever. Multibit is free software written by a team of unpaid volunteers with contributions by hundreds of people. When you use it you are using it entirely at your own risk. You can't really expect anyone to reimburse you.

This is will not over here , i wait to meet personal this "owners" to see if they ignore me when we are face to face .
Next mounth i will go to England and will see then whats happened .
Who take my money is my enemy , the word for whats happened here is " steeling ".
I will keep you all upgrade .
thx

Hi again,

I just reread through the thread and I noticed that OP continually uses this term "owners" in reference to the developers.  However, with respect to free and open source software, the developers aren't really the owners, the users are owners of their own installs.  The details are in the copyright/license, which in this case is the MIT license.

http://opensource.org/licenses/mit-license.php

I think the OP really needs to look carefully at the second paragraph (written in all caps for a reason):


This doesn't mean that the developers woudn't work with OP, but I think OP obviously doesn't have any right to make demands.

Finding who's to blame. That's the hard part.

f3tus , In October was the first time when i used Multibit in my life so how is my fault
Is my fault that a code error import this key ?
I havent import any key .......
They will not ever put me in front of this situation, and the blog is made bad , the story is not 100% they write just what they want .
No problem , i will start a mega campain today and we will see who have right .
Was so hard to compensate me for my lost ?
War start :|

The wallet was made in october 2014 and when i first reset the wallet in january other transactions apear in my wallet from april. I dont confirm any of this transactions .My first real transaction with Multibit was from 29 october 2014, the others before this apear when i reset the wallet in december

You installed MultiBit on a new laptop in December, but you generated the wallet on another PC in April, correct? Well, it's unfortunate, but it does seem like this is actually your fault for trying to import an invalid private key in April when you installed MultiBit for the first time.

Sorry to OP for the loss.  This did turn out to be a very strange situation.  I'm glad to know a little more about it and I'll be looking carefully at that forensic report.  At first glance it seems like they still don't know how the OP imported privkeys of 000000...

They did take some time to look into your subject, but they did a very detailed forensic. Read the blog.
They found the problem in two private keys (second and third key in the wallet), most likely imported into wallet using "Tools | Import private key" command in April 2014.

I have the Multibit owners answer

" Hello Cristi,
I cannot comment on your previous post as I neither saw it nor deleted it.

I have looked through the wallet you supplied to me on Sunday.

Unfortunately your hypothesis that the change output tx are unspendable is correct.
I have written up the pertinent details of this issue as a blog article on multibit.org describing what happened and our recommended steps for improvements.

It is here:
https://multibit.org/blog/2015/02/02/wallet-forensics.html

Regards,

Jim "

What you all say about this answer ?? I am very nervous because i wait 3 weeks to receive a answer like this :|

I just want back my btc from the Multibit owners . Thats all
They pay me my lost and i close the subject .
I am tired to write posts and feel angry .
I want a respons from a Multibit owner because on github they always tell me to wait .
And i wait for about 3 weeks .
I want they to compensate with my lost and i close the subject .

The bitcoinJ library and he's also a core developer of Bitcoin/Bitcoin-qt. And Lighthouse recently, a decentralized crowdfunding platform.

Sorry for the obviously ignorant question, but which pieces did Mike Hearn write?  Or what is the subproject that I should know him from?

I come back with updates .
They told me to wait again and nothing .
Now they dont respond on my messages .
Is not normal whats happened .:|

Here's what Mike Hearn said:


Maybe this happened due to you having corrupt RAM somehow.

Any update on the logs, steauacris89?

I don't think there is any known procedure to reproduce the error. Even MultiBit devs could not find anything (or claimed to find nothing) in the MultiBit code that could cause the issue.

And by the way, if I were you, I wouldn't try to reproduce the error. You wouldn't want to deliberately lose your BTC, do you?

I see,  I've used MultiBit since around that time but I've never encountered this.  What are the steps to reproduce the error?

No, we know it affected two users, one in 2013 and steauacris89 in 2015. The others could very well have used different software to generate the invalid address.

Yes , this is what i told them and they try to change the subject :|
JIM and GARY told me that this problem can be resolved , but when ?
Have pased aprox 2 weeks and they havent resolv nothing.
The best way they could resolve their image is to fix this bug and compensate the users , i agree with you.

Thx

To summarize, this is a known issue with MultiBit which has affected multiple people since 2012 and it is unresolved till date.

I strongly feel that MultiBit team should take full responsibility of this and compensate everyone who lost any BTC to 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh address.
After all 3.7 BTC is not a very huge amount for them.

I think this is the most confusing bug report ever.

https://blockchain.info/es/address/1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh

First transaction in this adress 2012-08-29 21:13:45, very strange. Always receive but never send

https://bitcointa.lk/threads/first-post-and-an-interesting-observation-about-ecdsa.148676/

http://bitcoin.stackexchange.com/questions/1851/how-to-generate-a-valid-bitcoin-address-for-destroying-bitcoins

https://twitter.com/defusesec/status/407219888780873728

Ah, yes, that makes sense.

No.
1FYMZE... appeared long time ago, with some buggy client, it is not only OP here that encountered this same bug.

His first tx, with change going to 1FYMZE is on 15.01, but since Multibit is now considering this address as part of wallet, it displays all tx on that address.

I install Multibit in December 2014 on a new laptop.
I cant understand why this adress appear in my wallet :|
Problem is that on 15.01.2015 at about 20:00 i try to make a transfer to a friend , i clicked send and appear a triangle in my transaction detailes and " unknow number of peers " .
I read the Multibit forum and i follow the reset steps .
After i reset him this 1 satosi transaction appear .

I cant understand what happened :|

See your screenshot: http://download52.files.attachmail.ru/st/b06040a9bfe05bf5a45dc4acdcf00c10

January 7th, you received 1 satoshi into 1FYMZE.

Up to 15.01.2015 multibit was using first (original, 1rzhWUU7LP9iyyeas4hT223kogqy6w67G) address for change. After that 'reset' it started using invalid address.

The question is, how did that address get generated? And when? Was it in your wallet before (request tab lists your receive addresses)?

First time is in 15.01.
And the strange thing is that this transaction appear in my wallet after i reset him :|

Does the 1FYMZE address show in your MultiBit any time in 2014, or is January 7th, 2015 the first time?

NeuroticFish srry if i upsad you . This was not my intention but if you look at every post of this topic everyone tell me the same thing " your computer was hacked , your wallet was fraud , etc ...) so please understand me because i cant tell to everyone the same thing .
I want to talk about this problem with you and i hope you can help me .
Thank you and srry .

Ok.
I get home and i compress the logs .
In about 2 h i will upload the link here.
Yhx

Do you remember what you did on January 7th and why you did it? Could you upload the 1GB logfile you mentioned on GitHub? If you compress it with rar/zip/7z it'll probably be only a few MB.

Apologies if you thought that as insulting. I tried to rule out all the posibilities, but yeah, that's what I get for trying to help.
Sorry for your loss and good luck. I am out of this thread.

Hy ,

Yes i think too that they are lost but without my fault.
My computer was secure and my wallet was secure and pls dont insult me with " did you write your private key on a public forum ?"
I know how to use a computer and a wallet .
I wait now for a respons from JIM or GARY regardes of my btc.
The only solution is to compensate me for my lost.
Thx

OP encountered an error in Multibit, where an invalid receive address was generated (1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh).

Everything was fine while Multibit used original address for change, but on 2015-01-15 it started using a different change address - that is, the invalid address above.

I'm afraid the coins are lost.

Multibit authors better find that bug fast.

I think that you don't understand how bitcoin works.
Your money is NOT inside multibit. It's also NOT in the wallet file from your computer.
Your money is in the bitcoin network.

Your wallet file and multibit only tell the network that you are indeed the owner of those money and you are allowed to do the transactions.


Now... if somebody got access to that data (wallet / private key and address), he can transfer your money away from anywhere just by making for himself a (another) wallet as legit as yours.
Again, I think that 1 satoshi transaction from 7 Jan could be the key to your problem. But I think that your money is unrecoverable.

First, my wallet had password , i removed the password on 20.01.2015.
Second , my wallet is not hacked , i havent made any transaction with this adress.
When i reset first time my wallet , some strange transactions appear in my wallet .
I guarantee 100% that my wallet was not hacked or frauded.

I had pictures with proves on https://github.com/jim618/multibit/issues/661
Please read this post and maybe you have a solutions .

Thx

From what I see in your transactions list, your MultiBit did not send BTC to the other address.
My conclusion is that your wallet was hacked, in a way or another. Or somebody did some sort of exploit.
Did you post somewhere your private key?!!?! Your wallet was also not password protected witch made it a good target.

Please try to remember what have you done in 7 Jan at 13:35 that had as result your incoming 1 satoshi from the bad address (!).

Hy SED,


My intention was not to insult you , i just told you to read again my post, because i explain there very clear that i havent made any import/generate.
The only thing i've made was to reset my wallet !

Thx

Hy.

No i dont imported any adress.
And the only transaction in my multibit is receiving 0.00000001 Btc from this adress , and i dont know because i never had any deal with this adress.

Thx

Multibit always worked well for me.
q1: did you generate / import hat bad address?
q2: did you actually send the btc to that address?

I undertand that you feel like I don't understand all of your post before commenting.  However, and don't take this as an insult, it's quite hard to understand your English.  I've read your posts and I've replied to what I could make out.  You really need to improve your English if you're going to comment like this to me, accusing me of not reading.

As far as I can tell, my point still stands, I've never had any troubles with multibit and it's an open source program so you can do what you want with it.  You seem to have done something ill-advised.  Apparantely you were generating an address with a private key of "0"?  I'm not even sure how you can do such a thing.  I'm sure that I missed soemthing, but I don't think you can blame me for your poor English writing.  What is your native language?

Please read again my post and them try to comment .
I havent done nothing in my wallet ,i only used to transfer and receive .
The bug make this, send the btc to a error adress from blockchain.
So please read all my post and after reply here !!!

Thx

I never had any issues with multibit, been using it for years.  Then again, I also understand something about bitcoin and I haven't tried any of the weird things you seem to be describing.

Why not take responsibility for your own funds?  This is really the ethos of bitcoin anyway, that you can be responsible for managing your own private keys and use them to move value around the world with the blockchain.

What is MultiBit?

MultiBit is a secure, lightweight, international Bitcoin wallet for Windows, MacOS and Linux

    MultiBit makes performing Bitcoin transactions quick and simple
    MultiBit comes in a variety of languages because Bitcoin is without borders
    MultiBit is free to download and is open source (MIT license)
    MultiBit is easy to install

MultiBit is donationware. If you find MultiBit useful please consider donating 0.01 BTC. Your donation helps pay for server and development costs. Thanks.


Multibit want DONATION ?
FOR WHAT PEOPLE DONATE TO THEM??
FOR SPENDING THE MONEY OR FOR IMPROVMENT ?

I WANT MY MONEY BACK ALL I GUARANTEE I WILL MAKE EVERYTHING IS POSIBLE TO BROKE THE IMAGE OF THIS BUG PROGRAM .

This are messages from multibit and ex-multibit users :

Any coins send to 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh will be unspendable.

If you go to http://gobittest.appspot.com/Address you can manually generate addresses for interesting numbers. You can f.x. generate the bitcoin address that has the private key "1". What you do is you put in the hex value for "1" in "private key" like "01". It then generates the bitcoin address 1EHNa6Q4Jz2uvNExL497mE43ikXhwF6kZm. If you in turn input something interesting into "public key" you will still generate a working address but you will have no way to calculate what the private key is. If you f.x. put in "0000000000000000000000000000000000000000000000000000000000000000000000000000000 000000000000000000000000000000000000000000000000000" you will get "13VmALKHkCdSN1JULkP6RqW3LcbpWvgryV". What happened with OP is that MultiBit (for whatever reason) calculated the address for the public key "00" (try it - it will generate 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh). There is no way for anyone to ever calculate the private key for that address (at least before working quantum computers with working algorithms).

I have never used MultiBit and I would have advised anyone asking me not to use it. It is not the first time they have dropped the ball. My personal lists of professionally developed wallets include (in random order)

bitcoin-qt
Electrum
Armory

legătură permanentă
salvează
inadecvat
oferă aur
răspunde

[–]1blockologist 2 puncte 19 hours ago

has anybody considered that multibit fucking sucks? I mean I used it as my first SPV client, but it's resyncing used to result in you having 0 balances no matter how many times you rescanned the blockchain, rescanning was fucking slow and increased A LOT the longer you had your address, and it is glitchy as hell and reports incorrect balances, displayed Mt Gox prices for MONTHS after it stopped being reflective of the market

annnnnnd this JAVA DEVELOPERS ARE NOT MOTIVATED BY $100, or $1000, or $3000

Stop using multibit.

legătură permanentă
salvează
inadecvat
oferă aur
răspunde

[–]7badgers 1 punct 18 hours ago

They are gone - don't waste time on it. Irrecoverable.

legătură permanentă
salvează
inadecvat
oferă aur
răspunde

[–]btcfun 1 punct 15 hours ago

Oh yeah, this again.

The problem is that it does not effect enough users, so the multibit developers just keep ignoring the issue.

Just think of it as a random tax!

I want Multibit owner to give back btc to all members who have problems . are 850 $ i this fake error and all of this are money from multibit members. I want him to answer me and give a solution .

As the OP has raised this in several places I have raised an issue in the MultiBit issues database here:

https://github.com/jim618/multibit/issues/661

Please can the OP post in that thread as it is confusing having multiple posts for the same thing.

Well your recent posts were certainly more informative than the first ones.  Neverthless, there's a big difference between "stole my btc" and I entered a weird and invalid address.  I'll be interested to hear more about this now.

This is an answer from a profesionist who knows my problem, i explain him and he told me to contact multibit owner .

" See https://bitcointa.lk/threads/first-post-and-an-interesting-observation-about-ecdsa.148676/

First, 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh is an invalid address, and is the result of choosing a bad exponent (0) when generating the address. It is possible that you hit a bug in Multibit that caused change addresses to be generated in this way. That is speculation though.

Second, the coins that have been sent to 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh are stuck there. While it is actually possible for anyone to generate a mathematically "valid" signature for that address, the 0 exponent is not allowed, and that signature will be rejected by the network. So, there is no way to get your coins out of that address.

Edit: I would recommend contacting the developers of MultiBit directly. If you can prove that you own 1rzhWUU... and that the bad transactions were in fact generated by MultiBit they may be persuaded to compensate you. Also, if this is a bug in MultiBit it should be fixed ASAP "

I put now the pictures and you will see that i dont say stupid things . This money are for bills and a bug from multibit put them in a error adress on blockchain .

this is my wallet with fake balance , because i cant send any of my money , and in transaction this money are there and i know what i send and what i received . adress 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh dont apear in multibit , it's a bug adress .

prove 1 : http://files.icq.net/files/get?fileId=CDB5AB76DB814FA5BAE6ADD36C0EA614

And this are the transactions in blockchain from me to this bug adress .

prove 2 : http://files.icq.net/files/get?fileId=75ED73B4FF5B49538B134982D9C6CB71

Now i hope things are clear , because the problem is not where i have this money , problem is that a bug from multibit take this money and move in a fake adress, this problem apear in 2013 . see the link : https://github.com/jim618/multibit/issues/403

I need my money back and i will write about multibit at every forum and page until they give me back my btc and solve the bug problem.

Thank you

If you have virus I suggest Malware Bytes it will help you restore your computer to a non virusey state and I am sorry to hear about your loss of your bitcoins $303 is not a small amount of money for most people. One other thing don't download things that could give you virus!!

Multibit doesn't steal, the multibit authors don't even have the private keys.  Most likely if they really have been transferred out of your control, you have some malware on your computer.

If by error address, you mean an error message, post it.  If by error address you mean the wrong address, one that is not your's, then that is most likely malware or someone with access to your computer.

What OS?

You might want to put the error messages into this thread.

Multibit doesn't steal, but if you don't know what you are doing you might be lost.  How did you acquire these bitcoins?

Multibit steel my money , in my balance apear real 303$ and in blockchain money are in a error adress called : 1FYMZEHnszCHKTBdFZ2DLrUuk3dGwYKQxh
Please i want my money back , i dont have any fault . my adress is 1rzhWUU7LP9iyyeas4hT223kogqy6w67G , you can see that are 6 transaction and no one of this is confirmed by me .
Please help me
And i cant generate private key , multibit dont let me .