harmony-one / chrome-extension-wallet

Harmony Chrome Extension Wallet
https://chrome.google.com/webstore/detail/harmony-one-wallet/fnnegphlobjdpkhecapkijjdkgcjhkib
60 stars 36 forks source link

Harmony One Wallet Import Account Function Using 12-Word Mnemonic Seed Phrase Opens Incorrect Wallet #99

Open GalaxySSX999 opened 3 years ago

GalaxySSX999 commented 3 years ago

Issue: Harmony One wallet browser extension import using seed phrase does not restore original wallet, but opens or generates a different wallet address with zero balance.

Any help is appreciated, here's a short summary of events (maybe not so short):

On top of this, I can still see my tokens if I explore the staking portfolio using my original wallet address, but when I troubleshoot by trying to transfer/delegate, the popup gives only 2 options to confirm and sign: Harmony Browser Extension (Deprecated) and Ledger Nano. When I click confirm and sign, I get "_undefined is blocked - This page has been blocked by Brave ERR_BLOCKED_BYCLIENT". If I sign out and try signing in with "Harmony Browser Extension (Deprecated)", it says I don't have it installed and invites me to visit chrome store to install Harmony One Wallet... and of course, if I sign out and sign in again using Existing Address > Harmony One Wallet, the pop up only gives me the option of signing in using the other empty wallet and my original wallet remains nowhere to be found.

Does anyone have a clue what the heck is going on?!? I'm the first to admit when I make mistakes, but I took precautions and have my seed phrase, so (possibly) losing all my ONE because of a software wallet bug/glitch is quite unfair and very frustrating. (Edited to remove all caps)

StrongMindsHold commented 3 years ago

I can confirm this issue has been reported by no less than 10 people.

carslanyan commented 3 years ago

I have this same issue, which I reported to the Community Manager on 4 May. I can also replicate this issue as well, as required and at will using the Harmony ONE wallet plugin on Chrome, Brave, and by using the Blits mobile wallet. Each time, the 12-word mnemonic opened the same, yet incorrect wallet (in other words, not my wallet it used to open, with my ONE balance).

Luckily, I have control of my wallet as I ended up finding the private key.

The expected result of opening the proper wallet used to work with the 12-word mnemonic without issue. As of 4 May, it did not and still does not. I have tested it as recently as late last week and I am consistently presented with the same incorrect wallet.

In short, I am very interested in this issue as I lost control of my wallet for an entire month and was able to recover it by dumb luck. (Edited to correct a typo and a bit more detail.)

dsiritz commented 3 years ago

I am having the exact same issue as the OP. I had made a transfer off the Harmony One wallet extension 2 months ago just fine and now when I am trying to delegate my ONE to a staking pool my password is incorrect no matter what. I'm computer savvy and have tried to exercise every possible solution under the sun to no avail. I finally tried to import my wallet with the 12 word phrase and was signed into a new different wallet address with 0 balance. Now I am signed into 2 wallets on my browser extension.

sophoah commented 3 years ago

@ethlocker can you please have a look at that issue. Thanks

dsiritz commented 3 years ago

This needs attention ASAP. My ONE is untouchable in my wallet still.

imyugioh commented 3 years ago

@dsiritz Can you share more details in the telegram? I need more information to debug it.

GalaxySSX999 commented 3 years ago

@ethlocker dsiritz and carslanyan mentioned having the same issues as I have, which is described in my opening post; what sort of additional details are you looking for, specifically, and in what telegram?

imyugioh commented 3 years ago

@GalaxySSX999 can you share your address with an empty balance? I need to find the relevance between two addresses

GalaxySSX999 commented 3 years ago

@ethlocker Certainly, here it is: https://explorer.harmony.one/#/address/one18ypg4wxt6lr7gfp6eassal3hh6qssx650pst6e

coolcottontail commented 3 years ago

@GalaxySSX999 . It might be some configuration issue with different javascript versions. Since we can't see your passphrase .... do you mind running the following node.js code locally to see if you can generate correct address ? PLEASE replace mnemonic string with yours. This requires node.js.

Step1 . install depency npm install @harmony-js/core@next npm install tslib Step2: paste the following code to a file and name it wallet.js Step3: run the command node wallet.js

const { Harmony } = require('@harmony-js/core'); harmony = new Harmony( "", { chainType: 'hmy', chainId: 1, } );

mnemonic = "describe pepper bracket tired noble thumb horse spray change tuition next knife" let account; try { account = harmony.wallet.addByMnemonic(mnemonic); } catch (e) { console.error("createAccountFromMnemonic error = ", e); return false; }

let address = harmony.crypto.getAddress(account.address).bech32; console.log(address);

GalaxySSX999 commented 3 years ago

@coolcottontail Thank you; I'm not a coder but can learn real frakin' quick, still, please bear with me - I followed your step by step instructions and I get same incorrect wallet address as a result:

C:>node wallet.js one18ypg4wxt6lr7gfp6eassal3hh6qssx650pst6e

rlan35 commented 3 years ago

@coolcottontail Thank you; I'm not a coder but can learn real frakin' quick, still, please bear with me - I followed your step by step instructions and I get same incorrect wallet address as a result:

C:>node wallet.js one18ypg4wxt6lr7gfp6eassal3hh6qssx650pst6e

When you first created the recovery phrase in one wallet. Is it on chrome browser or Brave or any other browser? Did you change browser during this period?

GalaxySSX999 commented 3 years ago

All on Brave

@coolcottontail Thank you; I'm not a coder but can learn real frakin' quick, still, please bear with me - I followed your step by step instructions and I get same incorrect wallet address as a result:

C:>node wallet.js one18ypg4wxt6lr7gfp6eassal3hh6qssx650pst6e

When you first created the recovery phrase in one wallet. Is it on chrome browser or Brave or any other browser? Did you change browser during this period?

All on Brave

copalli commented 3 years ago

I have exactly the same issue. Were you guys able to fix it? It's exactly the same. I was about to make a post about it.

rlan35 commented 3 years ago

I have exactly the same issue. Were you guys able to fix it? It's exactly the same. I was about to make a post about it.

were you also using brave? and did you update the one wallet before and after the problem?

rlan35 commented 3 years ago

I am having the exact same issue as the OP. I had made a transfer off the Harmony One wallet extension 2 months ago just fine and now when I am trying to delegate my ONE to a staking pool my password is incorrect no matter what. I'm computer savvy and have tried to exercise every possible solution under the sun to no avail. I finally tried to import my wallet with the 12 word phrase and was signed into a new different wallet address with 0 balance. Now I am signed into 2 wallets on my browser extension.

which browser were you using for the one wallet extension?

copalli commented 3 years ago

I have exactly the same issue. Were you guys able to fix it? It's exactly the same. I was about to make a post about it.

were you also using brave? and did you update the one wallet before and after the problem?

I originally used Chrome. Back in January an address was created with the intentions to stake One. But it was until a month ago I transferred all my Ones. When I downloaded ONE Wallet never connected to the existent address. I installed and uninstalled wallet extension many times and tried on Brave also.. still the same error: “deprecated, blocked by chrome…”

rlan35 commented 3 years ago

I have exactly the same issue. Were you guys able to fix it? It's exactly the same. I was about to make a post about it.

were you also using brave? and did you update the one wallet before and after the problem?

I originally used Chrome. Back in January an address was created with the intentions to stake One. But it was until a month ago I transferred all my Ones. When I downloaded ONE Wallet never connected to the existent address. I installed and uninstalled wallet extension many times and tried on Brave also.. still the same error: “deprecated, blocked by chrome…”

Can you add me on discord? would like to know more details: Rongjian Lan | Harmony#9543

carslanyan commented 3 years ago

Please let me know if I can provide further detail as I was only able to regain control of my wallet by dumb luck - meaning I found the private key. The 12 word mnemonic still does not open the correct wallet, but a 100% brand new one. This used to work, and last worked in March/April 2021. I also tried in Chrome, Brave and the Blits mobile wallet.

I am concerned more people are having this issue all seemingly without an apparent resolution. Please let me know if I can provide additional data points to aid in the troubleshooting.

GalaxySSX999 commented 3 years ago

Any news on a resolution to this issue?

dsiritz commented 3 years ago

Any news on a resolution to this issue?

No, I'm still being queried on whether or not I've written down an incorrect mnemonic phrase etc. This is really beginning to get frustrating being asked if it's my issue and not a critical security problem within the wallet.

hypnagonia commented 3 years ago

guys we are investigating could you contract me Discord Jenya :guitar:#2213 tg zunso

need to know 1 when was the first installation (wallet version or approximate date, browser) 2 if the first installation still available (even if password doesn't work anymore) 3 when you noticed that mnemonic generates new account (what changed, wallet version/date)

GalaxySSX999 commented 3 years ago

Sorry hypnagonia, but my requests to add Jenya :guitar:#2213 on Discord keep failing...

1 when was the first installation (wallet version or approximate date, browser):

First installation was on Brave, a few weeks before June 19, 2021; I don't know what the wallet version was at the time.

2 if the first installation still available (even if password doesn't work anymore)

No, it was removed on June 19th 2021.

3 when you noticed that mnemonic generates new account (what changed, wallet version/date)

On June 19th 2021, I attempted to reset the password by removing and re-installing the browser extension, and importing wallet using mnemonic, but a different account with zero balance was generated instead.

Original wallet: one1gzfqgml88udtm3fsksq5vuuclhphfj9mw2gtp6 Empty wallet generated with mnemonic for original: one18ypg4wxt6lr7gfp6eassal3hh6qssx650pst6e

hypnagonia commented 3 years ago

you can find me in harmony public channels or leave your nick name and i will add you currently we are lacking of information how to reproduce the problem. i tried both Chrome and Brave, all available wallet versions, including deprecated staking wallet and keep getting consistent key pair from mnemonics.

GalaxySSX999 commented 3 years ago

My discord nick is Manu_Forti#0384

Edit: there is supposed to be a zero "0" after the hashtag, but it gets removed when I post for some reason... like this: Manu_Fortihashtag0384

It's too bad you're not able to reproduce the problem, and I'm not sure what other info will help, but you can be certain that I and the others in the same situation are not making this up!

hypnagonia commented 3 years ago

sent you request yes, I am sure that problem is real, just have not found the cause yet

hypnagonia commented 3 years ago

I can confirm this issue has been reported by no less than 10 people.

hey, can you connect me with other people so we can get more details about the issue?

copalli commented 3 years ago

Any news on a resolution to this issue?

My issue still not solved either :( I have the exactly the same problem as you guys,

dsiritz commented 3 years ago

This issue is not specific to the One Wallet - it has appear on users with Blits wallet ( most recently confirmed today on a facebook group ). The user took a screenshot of his seed phrase when he created his blits wallet so its not an issue of incorrect phrase

This is sad to see. I'm still conversing with Harmony devs to fix the issue and regain access to my wallet. This has been incredibly difficult to deal with having my money locked away while being without income during lockdowns. It's been nearly 2 months without access to my money now.

dsiritz commented 3 years ago

Hopefully they will sort it.

This is just an idea and it's a 50/50.

Enter your seed phrase into trust wallet. This Blits user actually saw the correct account within trust even though Blits showed a new wallet. From trust wallet you 'should' be able to export the private key ( not the seed phrase )!

Once you have the private key import into One Wallet using the private key instead of the seed phrase.

Please let me know if this works ?

This issue is not specific to the One Wallet - it has appear on users with Blits wallet ( most recently confirmed today on a facebook group ). The user took a screenshot of his seed phrase when he created his blits wallet so its not an issue of incorrect phrase

This is sad to see. I'm still conversing with Harmony devs to fix the issue and regain access to my wallet. This has been incredibly difficult to deal with having my money locked away while being without income during lockdowns. It's been nearly 2 months without access to my money now.

Just tried it and it still opened the empty new wallet. Thanks for the suggestion 👍

theadopbeo commented 3 years ago

I have the same issue, when entering the seed phrase a new address is generated within one wallet extension with 0 ONE balance. I think the problem might be that I have imported a new account while using my original wallet extension. Should have tried doing this on a different laptop from scratch but once the second account was generated whatever I try doing it on trust wallet or another laptop browser, the seed phrase keeps generating the same wrong address wallet with zero balance on it. THE QUESTION is how to delete these latest additional accounts I have imported via the seed phrase so that I can keep only my original wallet. Re-installing the whole one wallet extension won't work as I may permanently lose access to my original wallet.

Hey, you can back up your original wallet's private key, and reinstall the wallet and import it !

theadopbeo commented 3 years ago

I have gone through the above issues, to prevent further complications, encourage everyone using one wallet to backup private key as well. No judgement about the above issues. But, people can also use this issue in a negative way to extort. For example, I can put my $one in wallet (store/lose) and I can generate a second wallet with a different seed phrase and claim that I am unable to access my funds because there are issue with harmony wallet and ask for refund.

Also, assuming 50/50 There might be an issue with wallet as well, another audit would solve this issue.

GalaxySSX999 commented 3 years ago

I have gone through the above issues, to prevent further complications, encourage everyone using one wallet to backup private key as well. No judgement about the above issues. But, people can also use this issue in a negative way to extort. For example, I can put my $one in wallet (store/lose) and I can generate a second wallet with a different seed phrase and claim that I am unable to access my funds because there are issue with harmony wallet and ask for refund.

Also, assuming 50/50 There might be an issue with wallet as well, another audit would solve this issue.

Are you kidding? This is a known wallet issue and the Devs are looking into it. Nobody here is asking for a refund, we just want our wallets to work, so you can take your insinuations elsewhere.

theadopbeo commented 3 years ago

I have gone through the above issues, to prevent further complications, encourage everyone using one wallet to backup private key as well. No judgement about the above issues. But, people can also use this issue in a negative way to extort. For example, I can put my $one in wallet (store/lose) and I can generate a second wallet with a different seed phrase and claim that I am unable to access my funds because there are issue with harmony wallet and ask for refund. Also, assuming 50/50 There might be an issue with wallet as well, another audit would solve this issue.

Are you kidding? This is a known wallet issue and the Devs are looking into it. Nobody here is asking for a refund, we just want our wallets to work, so you can take your insinuations elsewhere.

Read it again properly, "no judgement with the above issues" I said it can also be used maliciously and explained how it can be used by an user to extort. Also, I suspect there might and issue with the wallet as per above reports. One more audit will solve that discrepancy.

Edit: Nobody knows if there is an issue with one wallet. By going through the above posts, Dev's are trying to find if there is an issue with the wallet by recreating it. The code is open and audited once. I suggest going for one more audit, if there is an issue let the all your funds be refunded.

theadopbeo commented 3 years ago

I have gone through the above issues, to prevent further complications, encourage everyone using one wallet to backup private key as well. No judgement about the above issues. But, people can also use this issue in a negative way to extort. For example, I can put my $one in wallet (store/lose) and I can generate a second wallet with a different seed phrase and claim that I am unable to access my funds because there are issue with harmony wallet and ask for refund. Also, assuming 50/50 There might be an issue with wallet as well, another audit would solve this issue.

Are you kidding? This is a known wallet issue and the Devs are looking into it. Nobody here is asking for a refund, we just want our wallets to work, so you can take your insinuations elsewhere.

Read it again properly, "no judgement with the above issues" I said it can also be used maliciously and explained how it can be used by an user to extort. Also, I suspect there might and issue with the wallet as per above reports. One more audit will solve that discrepancy.

Edit: Nobody knows if there is an issue with one wallet. By going through the above posts, Dev's are trying to find if there is an issue with the wallet by recreating it. The code is open and audited once. I suggest going for one more audit, if there is an issue let the all your funds be refunded.

Edit : I am not a native English speaker, pardon me for grammatical mistakes and edits.

Peepspud commented 3 years ago

This issue has now occurred to me. I wrote all my seed phrase down. Though mine is 24 words not sure when this was changed. Anyhow not getting any one in my wallet when I had some before i restored it :( Hopefully this can be sorted.

Peepspud commented 3 years ago

happy to provide the address I should be accessing and the new one it has restored. Not sure what to do now.

Peepspud commented 3 years ago

Ok so wonder whether anyone is still looking at this issue. The addresses which I would like to query as follows. Address which I now get from entering my mnemomic phrase: Harmony wallet chrome extension: one1yl5wg4xhqz72q99s8xz9gqs8rq88vnlxgf7ftp Address which I should be accessing sourced by looking at my delegated pool and remembering how many one i had: one1cksjqm4g0tgepj9q653vptf5n3e0a79fysx6q0 Any help appreciated

mheatz commented 3 years ago

@Peepspud I just started dealing with this issue tonight unfortunately immediately after adding 1k ONE and staking them. All on the chrome extension Address I get from mnemonic phrase: one1q4tceqvxert8k86dzy6lyd0ke7l6w0g0vk08vg Address I should be logging into: one109c5866mm3nhz62y994gfwrxa9xwpwuuxz6wrs

senotajs commented 3 years ago

I have the same issue, I have forgotten my password so I am trying to recover my account with seed phrase but instead it generates a new wallet with 0 harmony tokens. Aynone has any solutions? Please help

rlan35 commented 2 years ago

I have the same issue, I have forgotten my password so I am trying to recover my account with seed phrase but instead it generates a new wallet with 0 harmony tokens. Aynone has any solutions? Please help

Is this happening on the old harmony staking chrome extension, or the One Wallet extension?

senotajs commented 2 years ago

I have the same issue, I have forgotten my password so I am trying to recover my account with seed phrase but instead it generates a new wallet with 0 harmony tokens. Aynone has any solutions? Please help

Is this happening on the old harmony staking chrome extension, or the One Wallet extension?

This is happening on the Harmony One Wallet chrome extension version 1.2.4.

Although I managed to recover my account via my password that I had saved long time ago, the issue's still standing. Impossible to recover wallet through seed phrase.

AdriaanArend commented 2 years ago

I have also a similar problem. I validated some Harmony, so far so good. But after reinstalling my wallet gives me a different address. So i cant link the validated harmony anymore. I tried import the wallet in metamask with the phrase, but it gives a another adress. Looks like the seed phrase is not linked to the adress. Is someone looking into it?

GalaxySSX999 commented 2 years ago

Could devs provide an update please?

AdriaanArend commented 2 years ago

Could devs provide an update please?

I don't think that harmony makes it a priority. Im afraid we can say bye bye to our one coins😥

rlan35 commented 2 years ago

I have also a similar problem. I validated some Harmony, so far so good. But after reinstalling my wallet gives me a different address. So i cant link the validated harmony anymore. I tried import the wallet in metamask with the phrase, but it gives a another adress. Looks like the seed phrase is not linked to the adress. Is someone looking into it?

Which wallet did you first get the seed phrase? Is it one wallet or the deprecated Harmony staking extension? Can you let me know the version of the wallet?

AdriaanArend commented 2 years ago

I have also a similar problem. I validated some Harmony, so far so good. But after reinstalling my wallet gives me a different address. So i cant link the validated harmony anymore. I tried import the wallet in metamask with the phrase, but it gives a another adress. Looks like the seed phrase is not linked to the adress. Is someone looking into it?

Which wallet did you first get the seed phrase? Is it one wallet or the deprecated Harmony staking extension? Can you let me know the version of the wallet?

One wallet and version 1.2.4

AdriaanArend commented 2 years ago

Any update? Some people waiting for more then 6 months.

vrlemat commented 2 years ago

This is the same issue I am having but on MetaMask. SAME ISSUE. I've been on telegram, twitter, reddit and so far it feels like I am the only one complaining about this (re MetaMask). This seems like a Harmony issue if it's occurring on two different wallets. I am so glad I didn't ape into my MetaMask, but still, the fact I can't trade renders my coins worthless. That's the bottom line. I should've learned the first time when one of my accounts dissapeared/wouldn't link. Now all my addresses are BRAND NEW ONE WALLETS with nothing in them. DYOR. I'm opening a github for MetaMask issue. Wonder if anyone will do anything. These seems like a black hole, and if this gets bigger, this is not good when we are at the peak of this cycle and people want their coins reallocated, but can't.

givp commented 2 years ago

@vrlemat I'm sorry you haven't heard back from anyone. Can you please explain exactly what you did? You imported your seed phrase to a new MetaMask wallet? Did you actually add Harmony network to your new MetaMask afterwards? What is the account address?