[SOLVED] Rippex random 1/3 wallet file corruption

[cybertrack]

Hi all,

I'm having a big issue with Rippex the XRP software wallet, It creates a corrupted wallet 1 times on 3 on my computer when using my microsoft OneDrive/Boxcryptor folder and the problem is that I trusted this wallet and already transferred XRP to it and now I can't login to it...

I think if someone could help me debug it (Javascript/C++) and echo/print what happens to the password when it is written to the wallet file then I could reproduce this bug to my actual password and finally decrypt my wallet file and get back my XRP, what do you think? Of course I would pay for this job.

PS : I did not write down the secret key, I was in full trust for Rippex like I trusted Exodus or Nano Ledger S.

Edited January 3, 2018 by cybertrack
SOLVED

[mrcarrot]

if it was that easy to decrypt a password for a wallet, it would defeat the entire purpose for cryptocurrency

[cybertrack]

57 minutes ago, mrcarrot said:

if it was that easy to decrypt a password for a wallet, it would defeat the entire purpose for cryptocurrency

I mean I have the correct password for it, I am not trying to decrypt the password but decrypt the wallet file already HAVING the correct password, I would like to decrypt it manually and compare, I have created another account with corrupted wallet file, here is it :

Something is clearly happening with the wallet file creation/encryption, it doesn't use my password at all or adds something to it, hell know what ?

Passphrase : azerty12
Ripple address : rDu9oJCuJG4Co3Pu4ZBDuf97Ys5RY6zzBb
Secret key : shSS3LKgKpappFwp35JghQa9SiDZh

and the corrupted wallet file :

eyJpdiI6InNpRXlyUzByajZCQUI4T2VCZFNqcFE9PSIsInYiOjEsIml0ZXIiOjEwMDAsImtzIjoyNTYsInRzIjo2NCwibW9kZSI6ImNjbSIsImFkYXRhIjoiIiwiY2lwaGVyIjoiYWVzIiwic2FsdCI6IjlvKzh2a1ZpbjhrPSIsImN0IjoiRHF1STlZeGtlZmxHMytoNmNLbGhoVkZDVTVZNGJGMVBraTVFV2VvZTFVTzNvaGdMQktHbHlPRmZkMm1OWndhVFJmczA2bm51UXFHbHdaRzlnb0RLTjI0R0M3SVZlK1B4QTRqRGlNakhrMjcvQWVNSmd3NjN4azR0YXVLRHY1N0NHYVZad2tnMjNHQXdISmtPcXFsWmZyc1VBODR3bFpXWWFaWjJmVEdpNkJYK2pjNUEwZklCaEdxb0Z5cjJKeDJ1TXRIc1h4aXVMcGt0TDZUZ2NzV2l2QVpES3JUNGJ3QnlhL3hBSENzMmt4Z2NTQ1pnIn0=VVdveVR0K0I3MUx1b0lXSEg4NjNSOEVyaW9RPT0ifQ==

Edited December 30, 2017 by cybertrack

[cybertrack]

The best would be to debug the process of creation/encryption of the wallet file and check how is it encoding / if is it missing or adding something because of a library or missing library from my computer.

PS : I am writing to the "OneDrive" folder because this bug happens more often when I write the wallet file to the "OneDrive" folder than to my Documents/Downloads folder, but still happens like 1 time on 15 if I don't write to "OneDrive"

Edited December 30, 2017 by cybertrack

[Guest]

I don't care about the wallet file...   I just proved the wallet then recorded the secret key on paper and then deleted the wallet file....  so I haven't struck an issue but I have seen people say that moving the file from its original location may cause this issue.

Try moving it to where it was originally created.

Also I should point out for other readers...   ALWAYS RECORD AND KEEP SECURE THE SECRET KEY.

(it even says so on that screenshot above...)

[TinyRick]

10 minutes ago, cybertrack said:

.......

Why you showing your password, and secret key is the bigger question here...

[Guest]

1 minute ago, PickleRick said:

Why you showing your password, and secret key is the bigger question here...

He mentioned he created a dummy test one...   I think that's the dummy one... So no harm...

[TinyRick]

Just now, Tinyaccount said:

He mentioned he created a dummy test one...   I think that's the dummy one... So no harm...

Fair enough. Guess I'm too paranoid...

[cybertrack]

Yes that's an example of what happens almost 1/3 times when I create a new account/wallet, this is a HIGHLY dangerous software !!! You create 1 of three corrupted wallets, or how to loose all your money!

I already moved the file everywhere, try to open this wallet file with this password : azerty12 (that it was created with) and you will be the man that saves the day

Edited December 30, 2017 by cybertrack

[Guest]

20 minutes ago, cybertrack said:

this is a HIGHLY dangerous software !!!

Yes you are starting to convince me....    Having said that....  If you follow the proper procedures for cold wallets then you are safe from this particular problem.

1.  create wallet on cold PC
2. RECORD SECRET KEY, password and public address. (It tells you to do that and insists you click a button saying you have done so...)
3. delete the wallet file.
4. create new wallet by entering the secret key
5. check it's the same public address as previously
6. send 22 XRP to public address
7. check transaction on Ripple charts or Bithomp
8. create an OFFLINE transaction to send 1 XRP back to sender
9. Install wallet software on an online PC (don't use the cold wallet key...   Just a empty online wallet)
10. Use USB key or QR Code to import the offline transaction to the online wallet
11. use Ripple Charts or Bithomp to check transaction worked.
12. delete the cold wallet file off the cold PC.  Turn off cold PC...  You won't need it again for years...  
13. Finish transferring the rest of the XRP into the cold wallet
14. put the recorded secret key in waterproof situation in at least two off-site locations.
15. HODL on for years.

Never let any camera near this process...   Be aware that laptops and phones have cameras that can be used without your knowing.

 

Ok...  So if you do the above it doesn't matter whether your password works or not...   The heart of a Ripple wallet is the secret key and you have proved that you can create a brand new wallet with yours and that it can sign a valid transaction and that it matches the public address you have for your wallet.

I know this doesn't help your current situation but it might help a reader and it might be the way to go if you are forced to start again.

[cybertrack]

ok but it's the same as if you don't give the password to anyone and write it on paper, noone can unencrypt the wallet without the passwords... And you can always check the address with read-only mode.

Please help me find a Javascript coder to compile a debugging version of Rippex and find what is happening to the password when Rippex writes it to the wallet file.

[Guest]

36 minutes ago, cybertrack said:

ok but it's the same as if ....

Um, no sorry, with respect I think you might have missed a bit of what I was indicating...

By following the steps I indicated you use Rippex to create a paper wallet.  But more than that...  you have proved both: that the secret key IS the key to that address, and that it functions properly to sign transactions.  

Lastly and most importantly...  after that you are not relying on any PC software.  You now are SOLELY on the distributed ledger.  

Your way with wallet passwords etc,  you are relying on the software still working in the future...   and as you have seen that may not always work as hoped.  

My way you are relying only on the consensus ledger.  

[Guest]

46 minutes ago, cybertrack said:

Please help me find a Javascript coder to compile a debugging version of Rippex and find what is happening to the password when Rippex writes it to the wallet file.

I'm sorry I can't help with that.  And I'm aware my notes are not really helping you..   sorry.  But maybe they will in future or fir other readers of this thread.  

[nomad]

I am in this same boat as Rippex didnt actually create a File for my wallet and I didnt write my secret code down.  Does anyone know where Rippex stores the wallet files or corrupted ones for that matter?  Lost alot of money im afraid.

 

[cybertrack]

6 hours ago, Tinyaccount said:

I'm sorry I can't help with that.  And I'm aware my notes are not really helping you..   sorry.  But maybe they will in future or fir other readers of this thread.  

 

Ok thx for advice

Edited December 31, 2017 by cybertrack