CityOfZion / neon-wallet

Light wallet for the NEO blockchain
http://neonwallet.com
MIT License
1.03k stars 312 forks source link

Neonwallet has changed my public address upon i connect it with Ledger Nano S then my NEO gone! #416

Closed dlv14 closed 6 years ago

dlv14 commented 6 years ago

Hello NeonWallet team,

I've used Neon Wallet with my Ledger Nano S, everything was worked well and I've sent all my NEO from Bittrex to Nano S a few days ago. But today, I open NeonWallet but it displays BLANK 0, GAS 0 - and my public address has been changed to the new one!

Can you give me some advices ? this scares me!

Thank you.

Honestbui commented 6 years ago

The same me..please help me

stevesbrain commented 6 years ago

@Honestbui @d0ngit - you guys aren't using temporary passphrase or something on your Ledger's? I've been using it on a Ledger and I'm still getting correct address + balance amounts showing. I can understand balance not showing if the API is down, but, public address should never change. Unless @Honestbui is just missing the address amount, and only @d0ngit changed the pubkey?

dlv14 commented 6 years ago

Hi @stevesbrain, I'm not using temporary passphrase on my Ledger Nano S and I have only 1 Nano S but today it displays another Public NEO Address! not the one before!

Do not know why my Public Neo address changed! and my balance all zero + history transaction also empty! :(

stevesbrain commented 6 years ago

@d0ngit Does this new address consistently stay on there? Is it possible you used a different passphrase the previous day? What if you restore from seed, or use the seed calculator offered by coranos? :)

rbish commented 6 years ago

@d0ngit I have the same problem, my NEONwallet is showing a different address then the NEONwallet address I first had when connecting with Ledger. I sent the tokens to the 1st address and when I signed in again with Ledger, I had different address and Blank coins. How do I recover that first address where my coins are sitting? Thanks for anyone that can help.

durdenSkyler commented 6 years ago

Same problem as others mentioned above. The wallet address generated when I first connected Ledger Nano S using OS X neon app 0.0.7 is different than the one I've gotten since logging out and back in with the same app and device. The new (2nd) address appears to be consistently derived (tested on my other machines).

stevesbrain commented 6 years ago

@durdenSkyler Other machines also OS X with Neon 0.0.7?

Honestbui commented 6 years ago

the same my problem, who guys see back NEO on Ledger now? can help me get back my NEO?

durdenSkyler commented 6 years ago

@stevesbrain First machine was OS X with Neon 0.0.7 - Neon wallet generated Address_1 with the Ledger Nano S and Neo was received and showed in the Neon GUI. I logged out and when I used the Ledger a 2nd time, it gave me Address_2. Second machine was windows 10 with Neon 0.0.7 and Ledger generated Address_2. Third machine was OS X with Neon 0.0.7 and generated Address_2.

Haven't been able to replicate Address_1 anywhere so those 10 NEO are stuck or lost.

stevesbrain commented 6 years ago

Sorry to say I don't really have much insight as to what may have caused this; I'm just sorry they're lost to you :( As a future pointer, might be worth using testnet rather than real world ones for this (not having a go at you, and it certainly shouldn't be necessary, but always better to play it safe!).

seaside-crypto commented 6 years ago

Have you guys tried to recover your ledger with your recovery phrase?

This was the first thing i did, before transferring any NEO to my Ledger:

The ledger wipes itself if you enter the wrong pincode too often (i think it was three times).

Also there is a recovery webpage on coranos' github. You can enter the recovery phrase there to get your private key.

For further questions please move to NEO discord channel #support.

My ledger works like a charm...

trancephorm commented 6 years ago

To ones that lost NEO... What operating system you're using? Are you sure your Ledger Nano S is original? Maybe the first tampered ones occurred in the wild? Where did you buy it?

dlv14 commented 6 years ago

Hello

@seaside-crypto: yes, i have tried by many ways include recover my ledger Nano S with the phrase. But it still shows new public address (also is current address)

@trancephorm:

Anyway, i already submitted this issue to NeonWallet team via their group chat. Hopefully they will have a way to figure out the issue then i can get my money back!

Thank you so much for your replies!

ghost commented 6 years ago

@d0ngit @Honestbui @rbish @durdenSkyler Did you guys always and only use the "Login using a Ledger" button?

Or did you use any of the other buttons before or after "Login using a Ledger", like "Create a new wallet" or "Login using an encrypted key"?

Honestbui commented 6 years ago

@coranos @d0ngit @rbish @durdenSkyler I only use the "Login using a Ledger" not have another

Thanks and looking forward from your support

ghost commented 6 years ago

@Honestbui can you tell me the address you sent from?

I haven't seen anything like what you described, so I'm not sure how such an error would occur, let alone occur to three people in three days. The ledger app computes the public key just like the recovery site, so if you get a different address than the recovery site, that's very strange.

stevesbrain commented 6 years ago

@seaside-crypto I did precisely the same thing, except I also sent a small amount of testnet to that address, and from that address before wiping; that way I had the added benefit of being able to verify transaction history comes back too :)

Honestbui commented 6 years ago

@coranos thank for your support i kindly tell you address sent NEO from: AVosxBJuA5DhswNhAVw1kmwoMBnjyp6hm6 and AJzoeKrj7RHMwSrPQDPdv61ciVEYpmhkjk

Bless you and see you

ghost commented 6 years ago

sending is important as well, because that verifies it's a real private key, which helps debugging.

I'll do what I can.

Honestbui commented 6 years ago

@coranos thank so much Bro, i looking forward your help my problem, i see all NEO on Neowallet app conected with ledger is successlly after transfer from bittrex and Binance..but now it have change new address on neowallet but now lost all coin and transaction historry

dlv14 commented 6 years ago

Hello @coranos ,

How is it going? I've the same issue with @Honestbui ,Btw Today, has another guy got issue with Nano S: https://github.com/CityOfZion/neon-wallet/issues/435

Please support us!

ghost commented 6 years ago

I'm talking with Ledger about it. We havn't been able to reproduce the problem yet, and I tried 20 times.

If you can reproduce the problem (wipe ledger, get a passphrase, get wrong address, get right address) it'd help a lot. So far, I've not been able to get it to break and I've tried 10 times over the last 72 hours.

dlv14 commented 6 years ago

Hello @coranos

This issue may because of Ledger Nano S is using a Hierarchical Deterministic architecture?

This means Nano S is able to generate multiple addresses and will have a diffirent address after each transaction. For BTC, ETH i knew that nano s supports this! Do not sure that this issue because of what!

Anyway, i have recovered nano s and tried by many ways but the new address still keep appearing. Cannot get back the old address anymore.

Hopefully, ledger and neonwallet can resolve this issue soon!

Thank you so much for your response! Have a good day.

ghost commented 6 years ago

I'm pretty sure that's not it. We only support "m/44'/888'/0'/0/0" NEO doesn't do "one address per transaction" that's IOTA.

If you want to check, type your 24 word phrase into the recovery site and look at the address list.

https://coranos.github.io/neo/ledger-nano-s/recovery/

Only thing I can think of is some kind of USB port problem flipped a bit in the key.

durdenSkyler commented 6 years ago

Hi @coranos thank you for looking into this. I used your recovery tool and my seed words and found my correct (2nd) address but was unable to find the 1st (stuck) address: AGAm...zFfTK. One thing that might be worth mentioning is that I didn't load up the neon wallet and go straight to the login with ledger button. I had timed out on the ledger (logged out) and clicked around the app before logging back in but I didn't finish a new wallet creation process or see the "Your Public Neo Address:" screen until after I logged in the first time with the Ledger.

OrEagle97327 commented 6 years ago

I am having the same problem. If anyone finds the solution, please post here. I would love to get my coins back. Not sure how to use the tool listed by @coranos. Not sure how to use it while not connected to the internet.
Shows what kind of novice I am.

ghost commented 6 years ago

open the website linked. turn off your internet access. type in your 24 word phrase. write down the wif.

dlv14 commented 6 years ago

Hello @coranos , looks like many people have the same issue with me! still waiting for your debugging results!

Have a good day and hope for a good news. Thank you!

ghost commented 6 years ago

I have been unable to reproduce the issue where the address changes on the first boot, and is the correct address on the second boot.

Ledger has not been able to reproduce the issue either.

If you are not able to use the recovery site to get your NEO, I do not know any other way to get your NEO.

dlv14 commented 6 years ago

Hello @coranos ,

So sad to hear that from you :(! Just let you know this story from a guy has similar issue as me in NEO - Smart Economy group (Discord App.): He was used the same private key to login to NeonWallet, but NeonWallet displayed the new address with Zero balance. But today, he informed me that his Neo is already back!

You can see his reply to me in attachment. He said that his NeonWallet is now still displaying the new address but NEO was back! took 1 month from the day he spoke to me in NEO Group (Discord app), very strange!

screen shot 2017-12-30 at 17 33 16
ghost commented 6 years ago

Ya that's a different issue. He sent it to the correct address, so it showed up in the block trackers.

ghost commented 6 years ago

The error appears to be on the Ledger App only, not on the Windows (or mac) wallets. I've tried both exiting the app normally (left button), and pulling the plug, and exiting while mid transaction (sign tx) and can't figure out how to glitch it.

To use the website with the network turned off, load the website, then turn off your network.

On a phone, go into airplane mode.

On a network with wifi, disconnect from the wifi network.

Probably nothing will happen if you use on a network connected computer, but if you are paranoid some malicious code will steal your neo, load the site on your phone in private browsing, turn airplane mode on, get the wif, write it down, turn off phone.

OrEagle97327 commented 6 years ago

Thank you coranos; I tried your "... corranos. github.io/neo/ledger-nano-s/recovery/" --with my recovery phrase, nothing returned; matched. That is, If I am trying to match this correctly. (novice me) Looking for more ideas? Has anyone recovered neo tokens; ...using this method?

ghost commented 6 years ago

If you typed in your 24 words correctly, the first entry in the list should have the same public address as you see in the neon-wallet. Check for spaces around the phrase, make sure there's only one space between each word. only use spaces, no tabs or paragraphs.

OrEagle97327 commented 6 years ago

Would that be the public key the coins were sent to?

ghost commented 6 years ago

That would be the public key the coins were supposed to be sent to. It's the public key that matches your private key.

If on first boot you got address A, sent neo to it, and then on second boot got address B instead of address A, address B should be the "correct" address, and address B should be on this list.

When you use your ledger and the neon wallet today, do you see an address in the list on the recovery site? If so, that's your correct address. You can confirm by trying to send gas to it, and then from it. If you can send gas from an address then that means for sure there's no glitch that caused an incorrect address to display.

OrEagle97327 commented 6 years ago

I run the list - None of the public keys match any of the public keys I have 1) Neon wallet currently showing attached to Ledger Nano S ...2) the address the coins were sent to ...ps thnx coranos

ghost commented 6 years ago

I've no idea whats going on then, as that site has been working correctly, even used it yesterday to help someone recover their WIF.

If you type in the example at the bottom of the recovery page, does it give the results the example says it will?

OrEagle97327 commented 6 years ago

I have been corrisponding on the public forum, I think this will be a direct connect. (novice me)

your question - "If you type in the example at the bottom of the recovery page, does it give the results the example says it will?"

I think the answer is no.

When I enter my passphrase The first line returns the public address to the current Neon access/connection to the Ledger, which is the empty wallet.

I see no address of the wallet the coins were sent.

When this transaction was initiated; I had waited Neon Wallet open, until the transaction history acknowledged receipt.

thnx for all response OrEagle

On Mon, Jan 1, 2018 at 2:01 PM, coranos notifications@github.com wrote:

I've no idea whats going on then, as that site has been working correctly, even used it yesterday to help someone recover their WIF.

If you type in the example at the bottom of the recovery page, does it give the results the example says it will?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/CityOfZion/neon-wallet/issues/416#issuecomment-354680338, or mute the thread https://github.com/notifications/unsubscribe-auth/AhTnqGS_VxmzuUKBRqHP90_qfqduGJybks5tGVWlgaJpZM4RBgVS .

ghost commented 6 years ago

So here's the situation you are in: "When I enter my passphrase The first line returns the public address to the current Neon access/connection to the Ledger, which is the empty wallet."

This is exactly what that site is supposed to do, and that address is the correct address for the private key stored in the ledger.

There is no way that I know of to recover coins from any other address.

OrEagle97327 commented 6 years ago

Is there any progress of the original statement of this thread? - "Neonwallet has changed my public address upon i connect it with Ledger Nano S then my NEO gone!" - This is what I experienced. - Where is Neon Wallet support?

ghost commented 6 years ago

There has been no progress.

I have been unable to reproduce the error. I took two days of holiday break to test this specific issue, and in 16 hours of testing I was unable to get the glitch to occur even once.

I have asked ledger to look into it, they have been unable to reproduce the error.

OrEagle97327 commented 6 years ago

From the responses here; it appears the error has reproduced more than a few times.

I wish to thank everyone for any time given to this issue. - Please; ...the problem is NOT solved.

There should be a community alarm to warn others of this potential hazard.

All additional help is greatly appreciated and needed.

durdenSkyler commented 6 years ago

@coranos - Really appreciate the time you've put into this. Quick question: When I try to reproduce the glitch I've been resetting my ledger, deleting the Neon App, and deleting the folder /Library/Application Support/Neon are there any other folder that the app modifies or uses to store state that i'm missing?

ghost commented 6 years ago

Based on the nature of the problem, it seems to be only a ledger device problem. So as far as I know, wiping your device and resetting it should show the glitch.

ghost commented 6 years ago

I've done my best to raise awareness: https://www.reddit.com/r/RaiBlocks/comments/7mij5j/ledger_nano_s_app_update/drx1566/

I've also created a walkthorugh of the steps people usually take to verify the ledger is working correctly: https://www.reddit.com/r/NEO/comments/7l1yil/instructions_on_how_to_test_your_neon_wallet_with/

also posted about the other bugs I've found: https://www.reddit.com/r/NEO/comments/7i3zcg/bug_in_neo_ledger_app_related_to_nep5_and_change/

ghost commented 6 years ago

When you do this, does it recreate the problem?

OrEagle97327 commented 6 years ago

I am asking an expert to try. ...thnx I have no more neo or gas

ghost commented 6 years ago

Sir, your neo is gone.

Finding the defect that caused your car to explode is not the same thing as un-exploding your car.

Simmilarly, imagining ways a car can explode is not helpful, when trying to find why a specific car exploded in a specific way.

Best I can do at this point is to warn people that at some point, their car may explode, and they better test their recovery process at least once before putting more than 2 NEO in any address.

I've muted this thread.

dlv14 commented 6 years ago

Hi @OrEagle97327 ,

My issue is still there. cannot be solved yet. Btw, If you're looking for NEO Support Group, then you have to use Discord App and search for this: "NEO - Smart Economy". I've posted my issue there earlier!

Invited link to join NEO Support Group Chat: https://discordapp.com/invite/R8v48YA

Hopefully, everyone can get NEO back, included me! Good day!