Based on the time-frame and my impression of the capabilities of the various groups developing wallet software during that period my initial guess was that the Bitpay copay software might be the source of these signatures. Copay is a multi-signature wallet which was initially released around that time.
Only Copay is affected by this vulnerability.
Although the package was included by many, many projects (both within and outside the crypto space), the attack payload was encrypted, and used the package description as a decryption key. They key in question was found to be (via brute force) A Secure Bitcoin Wallet, which is the npm description for the copay-...
Multisig and singlesig wallets use the same flow. A Tx proposal need to be created in singlesig wallets also. Copay syncronize across devices, so you can have a non-signing copayers in a 1-1 wallet that submit proposals, for later approval.
The flow is:
create => publish => sign => broadcast.
You can check the official client https://github.com/bitpay/...
Confirmations never stop. Confirmations is simply the number of blocks that have been mined on top of the block that contains your transaction. It will keep incrementing as long as blocks are being mined.
Is it normal to get 60 confirmations for a transaction in blockchain and still it is not received and confirmed
All wallets I'm aware of show even ...
These are not instructions to install it. These instructions are for building Copay on your system.
Here are the instructions for end-users (non-developers):
1) Download the latest binary
You should visit its Copay releases page on GitHub and choose the ZIP file for Linux.
After you download it, unzip it and make sure you moved its folder to somewhere ...
Like all true Bitcoin wallets, the Copay wallet secures your Bitcoin and Bitcoin Cash only on your device. To restore your wallet if your device is lost or stolen, you must save the 12-word backup phrase that you receive when you create a wallet. Without this recovery phrase, you will not be able to recover your funds.
I have solved my problem with a lot of debugging and help from the community on IRC irc.freenode.net #bitcoin-dev and also from people on the bitcointalk thread I started about this Topic.
I invite anyone having similar Copay Multisig Omni Colored Coins Recovery Issues to have a look at the bitcointalk thread here: https://bitcointalk.org/index.php?topic=...
The previous answer, while correct, is outdated. While BitPay did use a proprietary format early on, we quickly adopted the CashAddr format for Bitcoin Cash/BCH transactions.
You can use our address translator to get the correct format for any address (https://bitpay.github.io/address-...
It's a new address format for Bitcoin Cash proposed by BitPay, to prevent BTC/BCC address confusion. It's not widely used, currently.
The old addresses that start with 1 (P2PKH) are converted to addresses that start with C
The old addresses that start with 3 (P2SH) are converted to addresses that start with H
You can use this "address translator" to ...
The final transaction that gets broadcast to the network, just like every other Bitcoin transaction, is public. This is safe because signatures do not reveal any secret information. In the case of multisig wallets, when one wallet adds its signature and then sends it to another wallet, it doesn't matter if anyone is eavesdropping. It would be perfectly ...
Electrum (https://electrum.org) is a good choice if you wish to store your bitcoin locally on your PC. Supports things like hardware wallets, multiple wallets, seed (longish string of words) to recover your wallet if it's lost, and you can later on export your keys and import them into another wallet if you prefer.
Yes you can but I recommend Electrum instead because with Electrum you are not relying on one server for your view of the blockchain.
Copay and Electrum are both wallets that give you control of and responsibility for your private keys. Your private keys are all generated from your seed which will be displayed to you during wallet creation as 12 random ...
I need to know if my money will be safe in my copay wallet?
Your money is never in the wallet. The only important thing that is in a wallet is the private key.
Your money is actually in the bitcoin "Blockchain" ledger that is copied in every full bitcoin node (wallets, miners, exchanges, etc) worldwide.
So long as you have a copy of the private key in a ...
Regardless of how the password got enabled, once it is set, there is no way to access your coins without it, except by restoring the wallet using your backup phrase. So if you have your backup phrase, you can create a new wallet to access your coins. Choose the + button to create a new wallet and select "Import Wallet", and use the "Recovery Phrase" tab.
To clarify: CoPay has no relation to Bitcoin.SE, it was CoPay that issued that statement regarding the vulnerability. Bitcoin is a decentralized cryptocurrency, and Bitcoin.SE is a technical Q/A help site.
The statement released by CoPay/BitPay says the following:
A security update version (5.2.0) has been released and will be available for all Copay and ...
In early September, Google removed Copay and a number of other Bitcoin wallet apps from the Play Store. I don't think we know why exactly those apps were removed, but things like that do seem to happen from time to time in the crypto world. More recently (late November), it was revealed that a hacker had managed to inject code into Copay that could steal ...
I am searching for an answer to the same question. From what I have read so far, the Ledger Nano S does not support multiple BIP44 HD accounts, but I have contacted Ledger for confirmation of this.
This feature would be very useful to distribute the backups of your ledger device (no single backup would be able to steal your funds) but maintain the ...
I think I should leave a comment with a small correction to the flow ematiu posted after 1 day trying to figure out why I couldn't sign my transaction.
the actual flow is:
create => publish => get published => sign => broadcast.
this is because, in order to sign a transaction proposal we need a proposalSignature in the txProposal object. We only get this ...
Copay Dev Here.
Copay uses Bitcore-Wallet-Service (https://github.com/bitpay/bitcore-wallet-service) to communicate transactions proposals between copayers. When we stated Copay (prior version 0.5 I think) we used to use webRTC to directly communicate (using P2P networking) proposals between copayers but it was:
Very difficult to debug and support
Official BitPay/Copay support can be reached here:
Below are a few tips you can try to make the 12 word recovery phrase work:
Are you sure that the recovery phrase was written in the correct order?
Did you use all lowercase letters and no punctuation?
Did you add a password to your recovery phrase?
Do you have the QR ...
To recover Bitcoin Cash (BCH) from a Bitpay/Copay BTC wallet, please follow the steps below:
Within the Bitpay/Copay app, navigate to Settings.
Under Preferences, tap on Bitcoin Cash.
Tap on Scan wallets for BCH, and to the right of the BTC wallet you want to duplicate, and tap on Duplicate.
Duplicating the BTC wallet will create a BCH wallet in your ...
how can he recover his payment?
He can't. Bitcoin Cash transactions are not reversible and generally cannot be cancelled.
how can we recover his payment?
Create a Bitcoin Cash wallet using your Bitcoin private keys. Then refund him (less transactions fees, agreed handling fees etc)
Given that this involves putting your private keys into an unfamiliar ...
As long as you did not import any additional private keys manually, you do not need to make a new backup every time. Those 12 words can be used to restore all addresses in your account, past, present, and future.
If you imported any additional keys manually, you will need to make a backup every time you import a key, since they are not linked to the 12 ...
Thank you for reaching out. You can import or restore your Bitcoin or Bitcoin Cash wallet to your device by using the 12 word backup phrase for your wallet.
Please see the following article for steps on restoring your wallet using the recovery phrase: https://support.bitpay.com/hc/en-us/articles/115003004363-I-lost-my-wallet-or-changed-my-phone-What-can-I-...
Anyone has an idea?
Use a spelling checker on your twelve-word recovery phrase.
Even better, use a tool to check the phrase against the appropriate BIP39 dictionary for your language.
>wordcheck able moose zoo
able - OK
moose - Not in bip39 dictionary
zoo - OK