Jump to content
BumFuzzle

WARNING! Linux Bug

Recommended Posts

CasinoCoin GUI Wallet: Version 4.1.3 Ubuntu Linux: Version 18.04

When using the "Receive Coins" window, and clicking on "Create New Account", a new account (address) is created after entering a label and the wallet password. In this moment you are able to deposit coins to this address successfully. You will even see the transfers flow in and you will be able to send coins from this new account.

Once you close the wallet via Tools->Close Wallet and then exit CasinoCoin GUI, upon reopening the same wallet, any newly created accounts will be gone and unrecoverable thus far. All transactions regarding that new account will also be gone. There will be no history of that account except in blockchain.

It is also confirmed in CasinoCoin Wallet Version 4.1.3 MAC that this is not the behavior. All accounts created are maintained in the wallet even after closing.

What else I find is that the function for the button "Create Address" is not really creating a new address. It is creating a brand new wallet. There is an XML entry that gets added to the keys file if you export it. The XML filc ontains an entry for each address including:

Account ID

Public ID

Secret Key

and a bool Encrypted

This means that in Linux 4.1.3 you are required to export a NEW key file after any address creation or you loose that new account. Once you export the new keys file,, upon reopening the wallet, you will notice that the new address is still gone. TO get it back you must import the new key file. This will be the behavior every time until this bug is fixed.

In MAC it seems the new address is added to the DB and retained, but given this behavior I highly suggest that you export a new keys file after the creation of any new accounts or addresses.

In Bitcoin, when you create a new Address for receiving, that address is associated to the Parent within the Cryptographic key. Casino Wallet Devs are mistaken when the state "Create New Address" as the key file reveals it is a totally new wallet, recoverable and usable alone via command line using the secret key. This function must either be thrown out or modified to automatically export a new keyfile for safety sake. I also recommend that we get these two OS versions in sync. Which ever the correct workflow is supposed to be, make it so in all versions.

Until this is fixed, for your safety, export a new key file after the createion of anything except a deposit or withdrawal.

 

I lost 1.6 Million coins with this error.

 

 

 

  • Thanks 1

Share this post


Link to post
Share on other sites

Daniel and the other devs have been very professional in tracking and trying to find this problem. Will keep y'all updated but the simplest answer for the fix is going to be:

After every account creation using the "Create Account" button on the "Receive" tab, simply export a new keyfile. I do not know if that will save the transactions but at least you will not loose the account and control 🙂 Feel free to ask questions of follow in Discord

  • Thanks 1

Share this post


Link to post
Share on other sites
Ok regarding the error/bug which I reported where I had a loss of 1.6 million coins. It seems that in the process of me conducting a backup of the Wallet Database files, the Owner and Group were changed to ROOT. This is bad as the CSC GUI runs as the normal user whom is logged in. That means that CSC could not write new accounts to the filesystem as it should have. So once I closed the wallet software, there would have been no record of the account existing. Now for the normal user, this is likely not even a problem, but for advanced users whom try moving their wallets, be sure not to do it as root, sudo or any other user as once those properties are changed, it is over.
 
 
 
There is a fix though. One the user can change the user:group back to what it should be and then reopen the wallet and all will be back to normal.
 
 
 
Looking at this with Daniel may lead to the team creating a sort of "sanity" check to be sure this does not happen again. For Windows users, this would not even be an issue except in the event that some antivirus software quarantines your wallet or whatever. I believe this will only affect *NIX systems.

Share this post


Link to post
Share on other sites
1 hour ago, BumFuzzle said:

conducting a backup of the Wallet Database files, the Owner and Group were changed to ROOT.

Only if you restored as root into the .casinocoin folder would this have happened. Not during a backup. Apologies if I've misunderstood what you've written.

Or did you run the GUI as root once, and then subsequently as a normal user?

But yes, a sanity check would be that the program checks for rights to the folders on startup. However, that won't stop back end shenanigans as root, while the GUI is running.

Asking these questions to ensure that something like this doesn't happen to me!!

Edited by Fidgetspinner

Share this post


Link to post
Share on other sites

18.04.1 Xubuntu 4.15.0-33-generic here, I don't have this bug in Wallet 4.1.3 / DB 1.0.1, as i've still got my small stack of CSC after quitting the GUI and reopening

Share this post


Link to post
Share on other sites

Thanks Daniel, sorry, re-read OP thread on Reddit and he mentioned using sudo when moving wallets, not something i'll ever want to do. General wallet question though, can I install the Android wallet and see the same on that I have on the desktop, or are they device dependent ?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×