Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Multisig 2 of 2 #8244

Closed
tholzing opened this issue Mar 15, 2023 · 8 comments
Closed

Multisig 2 of 2 #8244

tholzing opened this issue Mar 15, 2023 · 8 comments
Labels
maybe-malware user story which might be a result of malware

Comments

@tholzing
Copy link

I had a multisig wallet 2 of 2.
BTC were transferred by the cosigner only.
How can this be done?
Is this a security issue?
@SomberNight
Copy link
Member

In a 2of2, both keys have to sign to be able to spend coins.
Maybe explain in a bit more detail what happened?
Do you control both cosigners, or is it you and a friend, etc.

@tholzing
Copy link
Author

It was me and a supplier. The supplier just got the whole bunch of money - I don't know how. He had one key - i had the other. Is it possible to crack the electrum wallet?

@SomberNight
Copy link
Member

Please give more details.
How exactly was the multisig wallet created, step by step.

@tholzing
Copy link
Author

Exactely as shown here: https://electrum.readthedocs.io/en/latest/multisig.html

@ecdsa
Copy link
Member

ecdsa commented Mar 23, 2023

First, maybe you could provide a transaction ID so that we can check that you were actually using a multisig wallet, and we do not just have to trust you on that. We don't know you, we have no way of telling how competent you are, and so we have to assume that you are just as competent as the average user.

Secondly, how do you know that the supplier got the money? if they stole it, they would probably not make it obvious that the money went to them, unless they were really dumb.

Thirdly, if the supplier really is the person who stole the money, then they only need one seed (yours). in other words, using multisig as escrow does not protect you more than single-signature from the other signer. did this supplier also help you setup the wallet?

@SomberNight SomberNight added the maybe-malware user story which might be a result of malware label Apr 23, 2023
@SomberNight
Copy link
Member

closing. nothing actionable

@accumulator accumulator mentioned this issue Apr 24, 2023
Closed
@tholzing
Copy link
Author

Sorry - was away for business some days.
I hope and I would appreciate your analysis.

transaction number:
a3c8cf8da7c8b9425e6078a99dfb2e60adf49fe73f68408268b9dfecd5644c74

An yes - the BTC are definitely transferred and not available any more in the wallet.
The BTC were transferred to several different other addresses.

@accumulator
Copy link
Member

transaction number: a3c8cf8da7c8b9425e6078a99dfb2e60adf49fe73f68408268b9dfecd5644c74

This is a 2of2 multisig transaction, and it was signed by both parties.

Question remains: did this supplier also help you setup the wallet?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
maybe-malware user story which might be a result of malware
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@accumulator @ecdsa @SomberNight @tholzing