Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot Send Domain/NFT from Ledger #73

Open
woodydeck opened this issue May 14, 2024 · 13 comments
Open

Cannot Send Domain/NFT from Ledger #73

woodydeck opened this issue May 14, 2024 · 13 comments

Comments

@woodydeck
Copy link

Ledger functionality was introduced without the ability to sign Tx for contracts. This means all domains are stuck without understanding how to sign at the low level, which is not something end users should have to do.

It should be a top priority to fix this problem. In the event of a security problem users will have no way to send out their assets. This is bad.

@mytonwalletorg
Copy link
Owner

Unfortunately, managing contracts and sending NFT is not supported by the Ledger TON app itself (the one in Ledger Live), we can not affect that. We do know, there is a new version of that app in development at the moment, but they provide no ETA.

@woodydeck
Copy link
Author

It would be wise then to remove Ledger functionality by default. It can be hidden behind an option with a very strong warning.

@mytonwalletorg
Copy link
Owner

mytonwalletorg commented May 14, 2024

Makes sense, we will consider that.

@woodydeck
Copy link
Author

I just double checked in the ton-cli repo, while ledger works just fine, there's no way to construct a raw transaction. I'm sure I could figure this out and write something if I had enough time, but I don't. I will pester them to explain what's happening and hopefully get this sorted.

One of the worst problems now in TON is a lack of hardware wallet support. It's a lot harder to validate contracts compared to EVM chains, so fighting drainers is a top priority for users. In this case a cold wallet with paper is the best way.

Off-topic Feedback While I'm At It:

I mostly use Tonkeeper, it's a great wallet, but it has some questionable UI in terms of security, truncating the addresses too thin, and no HW support. I prefer MyTonWallet's desktop version and UX. It would be great to push security features on desktop. I still don't like using mobile wallets, and distrust centralized APIs communicating things with signed Tx like on Tonkeeper. Really awesome though for your average day to day transactions for small money, not so great for security as it adds a lot of surface.

@mytonwalletorg
Copy link
Owner

I mostly use Tonkeeper, it's a great wallet, but it has some questionable UI in terms of security, truncating the addresses too thin, and no HW support. I prefer MyTonWallet's desktop version and UX. It would be great to push security features on desktop. I still don't like using mobile wallets, and distrust centralized APIs communicating things with signed Tx like on Tonkeeper. Really awesome though for your average day to day transactions for small money, not so great for security as it adds a lot of surface.

So what exactly are you suggesting to us as MyTonWallet team?

@woodydeck
Copy link
Author

I mostly use Tonkeeper, it's a great wallet, but it has some questionable UI in terms of security, truncating the addresses too thin, and no HW support. I prefer MyTonWallet's desktop version and UX. It would be great to push security features on desktop. I still don't like using mobile wallets, and distrust centralized APIs communicating things with signed Tx like on Tonkeeper. Really awesome though for your average day to day transactions for small money, not so great for security as it adds a lot of surface.

So what exactly are you suggesting to us as MyTonWallet team?

For security:

Multi-sig wallets for business and family. Linking and icons for verified source code of contracts direct to Tonscan, maybe with an internal trust score weighted recursively by a trust score and account age. Desktop wallets should be less hot wallet-y.

To solve current issue:

Offline transaction signing. In this case a workaround would be to provide the tools of MyEtherWallet (or whatever the fork of that is called). You create the input, and then the way to sign that input. This can be a way to agnostically allow more HWs.

Most end users use mobile. As a dev I barely touch my phone during the day. I have about 30 minutes screen time a day. Desktop is where business happens, so all things for business should migrate from desktop to mobile imo.

@daic11
Copy link

daic11 commented May 16, 2024

How can I export a seed phrase from my Ledger to MyTonWallet? Ledger has by default BIP39 passphrase which IS NOT compatible with MyTonWallet. They do their own convert to BIP32.

Please help me to recover my NFTs.

https://github.com/LedgerHQ/app-ton-new/blob/develop/src/common/bip32.c

Here is a link of their conversion function.

@mytonwalletorg
Copy link
Owner

https://github.com/mytonwalletorg/ton-ledger-export

@woodydeck
Copy link
Author

Awesome! Let this be an example for everyone else in the community. Crypto development is hard and comes with the unexpected.

@daic11
Copy link

daic11 commented May 16, 2024

BEST!!! THANK YOU!!!

Repository owner deleted a comment from MXzander May 17, 2024
Repository owner deleted a comment from MXzander May 17, 2024
@GolovkoStepan
Copy link

Please tell me, in which application can I use a private key instead of a passphrase? TrustWallet is suitable, but it cannot transmit nft.

@mytonwalletorg
Copy link
Owner

Please tell me, in which application can I use a private key instead of a passphrase? TrustWallet is suitable, but it cannot transmit nft.

MyTonWallet

@daic11
Copy link

daic11 commented May 24, 2024

Please tell me, in which application can I use a private key instead of a passphrase? TrustWallet is suitable, but it cannot transmit nft.

Just use MyTonWallet and paste a private key instead the first word in passphrase window and press enter.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants