biblepay/biblepayunchained

BiblePay Unchained/BiblePay DLL

Unchained

Extra Directions/Explanation goes here:

biblepayunchained's Issues

Unchained Mobile Issue

Bug report:

I have tried out the mobile unchained wallets (iOS and Android) as well as merge-mined to the project mining pools. I ran into some bugs that may block adoption of this project, at least in the short term. This email contains the top 5. I am an outsider to your project and ecosystem, so this is from a fresh perspective. I hope you find these bug reports helpful!

BUG 1)
the unchained Android wallet cannot import BIP32 nor BIP44 mnemonics - it crashes every time

steps to reproduce:

• import valid 12-word BIP32 or BIP44 mnemonic

expected:

• mobile wallet does not crash
• expected private key & corresponding address are available to the wallet to send and receive

actual:

• mobile wallet crashes
• mobile wallet can only go to the account creation or import screen

notes:

• app version 2.1.4
• creating a new account works without crashing, however pls. see BUG 3
• all attempts at 12-word BIP44 imports have failed

BUG 2)
the iOS unchained wallet send function is broken

steps to reproduce:

• (pre: mine some BBP to the first BIP44 address the iOS unchained wallet derives for you)
• send 1 BBP

expected:

• 1 BBP sent to the intended address + fees & possibly a 10% tithe
• 1 BBP sent appears in blockchain explorer and mobile wallet transaction list
• account totals match between the mobile wallet and blockchain explorer

actual:

• 1 BBP sent to the intended address + fees & approx. 5 BBP sent to another unexpected address
• approx. 7 BBP spent total, as seen in blockchain explorer
• 1 BBP sent appears in the mobile wallet transaction list, but the second 5 BBP transaction does not appear
• account totals in the blockchain explorer and mobile wallet do not match due to the missing unexpected transaction

BUG 3)
"receive" address keeps changing in iOS unchained wallet

steps to reproduce:

• create a new account
• jot down the "receive" address
• (earn some BBP via mining, let some days pass, etc.)
• go to the "receive" tab and look at the public address
• jot down the "receive" address

expected:

• receive address is always the same

actual:

• receive address is changing
• I am unsure what internal app state change causes the receive address to change so I cannot trigger an address change on-demand (but I have seen it several times now)

notes:

• I am unsure what internal app state changes cause the "receive" address to change (e.g. does it change upon sending BBP? Do transactions change it? Is it date-dependent?)
• The receive address remains consistent for some time but it will eventually change upon some undetermined app state change. This means if you simply switch back and forth to the "receive" screen in a single session, the address likely won't change. However, something will eventually change it.
• I noticed this while trying to look up the wallet address for mining. The app showed two different addresses at two different times.
• I am unsure if these addresses are simply different valid BIP44 addresses from the same mnemonic, or if key/address derivation itself has a bug
• iOS app version: the published version as of Apr 6, 2022 (I'm unsure how to find out the number)

BUG 4)
The 12-word mnemonic given during account creation in "unchained" Android (and possibly iOS) does not result in a matching BIP44 address when entered into https://www.biblepay.org/mobile/Mnemonic.html

steps to reproduce:

• install android unchained mobile wallet version 2.1.4
• create a new account + record 12 words
• go to "receive" screen and record address
• go to https://www.biblepay.org/mobile/Mnemonic.html
  ** if junk account then use online html; if actual account then copy page code + use on machine that is not, nor ever will be connected to the internet, (etc.)
• enter 12 words
• select "BBP - Biblepay" as coin
• use BIP44 as derivation path
• search for address in the list of addresses

expected:

• address found

actual:

• address not found

background:

• I was attempting to find out why BUG 3 was producing different addresses, but none of the given BBP addresses on Mnemonic.html match the app's "receive" address. Thus, even with a 12-word mnemonic for the iOS unchained wallet, I am unsure if it's possible to recover anything mined to the address given by the mobile wallet, should the stored private key be lost from the device (due to uninstall, accident, software update, etc.).

notes:

• because I cannot find the mobile unchained app source code on github, I am unsure of the actual derivation path, passphrases, seeds, (salt, etc.) that may have been used to derive an address so I apologize for not being able to dig in further
• Mnemonic.html does not automatically update to BBP, so when reproducing this bug please make sure you are generating BBP addresses instead of BTC addresses (i.e. addresses starting with B vs 1).