Balance not updating?

[Displee]

I went to my Bitcoin wallet -> Receive -> Copied the address and sent some Bitcoin to it one hour ago

My balance is not updating. I tried to do a re-scan, didn't help.

If I go back to my Bitcoin wallet -> Receive, it gives me the same address as the one I sent Bitcoin to

I checked my bitcoind docker compose service logs and it looks fine to me...

btcpayserver_bitcoind        | 2024-01-03T15:55:42Z Saw new header hash=00000000000000000000ab5597cd90ba9a0e218fd16872e95b3d313c4471fcc1 height=824182
btcpayserver_bitcoind        | 2024-01-03T15:55:42Z [net] Saw new cmpctblock header hash=00000000000000000000ab5597cd90ba9a0e218fd16872e95b3d313c4471fcc1 peer=22
btcpayserver_bitcoind        | 2024-01-03T15:55:55Z UpdateTip: new best=00000000000000000000ab5597cd90ba9a0e218fd16872e95b3d313c4471fcc1 height=824182 version=0x2ac48000 log2_work=94.643150 tx=947289490 date='2024-01-03T15:55:09Z' progress=1.000000 cache=21.3MiB(78971txo)
btcpayserver_bitcoind        | 2024-01-03T16:09:44Z New outbound peer connected: version: 70016, blocks=824182, peer=928 (block-relay-only)
btcpayserver_bitcoind        | 2024-01-03T16:18:52Z Saw new header hash=000000000000000000032475b39b77e0ba07f2c3bd379428deace4768199221f height=824183
btcpayserver_bitcoind        | 2024-01-03T16:18:52Z [net] Saw new cmpctblock header hash=000000000000000000032475b39b77e0ba07f2c3bd379428deace4768199221f peer=442
btcpayserver_bitcoind        | 2024-01-03T16:18:54Z UpdateTip: new best=000000000000000000032475b39b77e0ba07f2c3bd379428deace4768199221f height=824183 version=0x20014000 log2_work=94.643165 tx=947292093 date='2024-01-03T16:18:10Z' progress=1.000000 cache=13.8MiB(21367txo)
btcpayserver_bitcoind        | 2024-01-03T16:19:21Z Saw new header hash=000000000000000000036e35e5b2f2fdafd8a499e1d1df5145f0a0f6f86581e7 height=824184
btcpayserver_bitcoind        | 2024-01-03T16:19:21Z [net] Saw new cmpctblock header hash=000000000000000000036e35e5b2f2fdafd8a499e1d1df5145f0a0f6f86581e7 peer=22
btcpayserver_bitcoind        | 2024-01-03T16:19:37Z UpdateTip: new best=000000000000000000036e35e5b2f2fdafd8a499e1d1df5145f0a0f6f86581e7 height=824184 version=0x28000000 log2_work=94.643179 tx=947294457 date='2024-01-03T16:18:51Z' progress=1.000000 cache=15.7MiB(35594txo)
btcpayserver_bitcoind        | 2024-01-03T16:27:37Z Saw new header hash=00000000000000000000fca878ab9de3528a6cce4c80aa7b790671a882ca949f height=824185
btcpayserver_bitcoind        | 2024-01-03T16:27:37Z [net] Saw new cmpctblock header hash=00000000000000000000fca878ab9de3528a6cce4c80aa7b790671a882ca949f peer=453
btcpayserver_bitcoind        | 2024-01-03T16:27:38Z UpdateTip: new best=00000000000000000000fca878ab9de3528a6cce4c80aa7b790671a882ca949f height=824185 version=0x2aac8000 log2_work=94.643194 tx=947296779 date='2024-01-03T16:27:24Z' progress=1.000000 cache=17.4MiB(48973txo)
btcpayserver_bitcoind        | 2024-01-03T16:31:26Z New outbound peer connected: version: 70016, blocks=824185, peer=930 (block-relay-only)
btcpayserver_bitcoind        | 2024-01-03T16:31:46Z Saw new header hash=0000000000000000000337923464b3cbc992ca6e00f5d9a572c65e6c1b4238f6 height=824186
btcpayserver_bitcoind        | 2024-01-03T16:31:46Z [net] Saw new cmpctblock header hash=0000000000000000000337923464b3cbc992ca6e00f5d9a572c65e6c1b4238f6 peer=22
btcpayserver_bitcoind        | 2024-01-03T16:31:46Z UpdateTip: new best=0000000000000000000337923464b3cbc992ca6e00f5d9a572c65e6c1b4238f6 height=824186 version=0x20a00000 log2_work=94.643208 tx=947300674 date='2024-01-03T16:31:39Z' progress=1.000000 cache=19.1MiB(61280txo)
btcpayserver_bitcoind        | 2024-01-03T16:35:04Z New outbound peer connected: version: 70016, blocks=824186, peer=931 (block-relay-only)
btcpayserver_bitcoind        | 2024-01-03T16:35:36Z Saw new header hash=0000000000000000000158e18d2e6ce0c2cea5f8c36d7835e2a5e3a543fd72bb height=824187
btcpayserver_bitcoind        | 2024-01-03T16:35:36Z [net] Saw new cmpctblock header hash=0000000000000000000158e18d2e6ce0c2cea5f8c36d7835e2a5e3a543fd72bb peer=22
btcpayserver_bitcoind        | 2024-01-03T16:35:43Z UpdateTip: new best=0000000000000000000158e18d2e6ce0c2cea5f8c36d7835e2a5e3a543fd72bb height=824187 version=0x3fffe000 log2_work=94.643223 tx=947303985 date='2024-01-03T16:35:19Z' progress=1.000000 cache=20.8MiB(73869txo)
btcpayserver_bitcoind        | 2024-01-03T16:44:04Z Socks5() connect to 65duacb3kzxaxskdqclss5fkmrslbjwz4hnzhhzzdjpuniubyuru77yd.onion:8333 failed: host unreachable
btcpayserver_bitcoind        | 2024-01-03T16:48:54Z Socks5() connect to i5ba5ipnt6gbzqhg4gb2nambhz46oixh6727xzjbgyo3ptlngygojmqd.onion:8333 failed: host unreachable
btcpayserver_bitcoind        | 2024-01-03T16:50:08Z Saw new header hash=0000000000000000000235dc86ccf2944b9b21ce81313810e9aa0cdadfae3b76 height=824188
btcpayserver_bitcoind        | 2024-01-03T16:50:08Z [net] Saw new cmpctblock header hash=0000000000000000000235dc86ccf2944b9b21ce81313810e9aa0cdadfae3b76 peer=22
btcpayserver_bitcoind        | 2024-01-03T16:50:09Z UpdateTip: new best=0000000000000000000235dc86ccf2944b9b21ce81313810e9aa0cdadfae3b76 height=824188 version=0x20010000 log2_work=94.643237 tx=947307116 date='2024-01-03T16:49:45Z' progress=1.000000 cache=23.9MiB(95625txo)
btcpayserver_bitcoind        | 2024-01-03T16:51:56Z New outbound peer connected: version: 70016, blocks=824188, peer=933 (block-relay-only)
btcpayserver_bitcoind        | 2024-01-03T16:54:57Z Saw new header hash=00000000000000000003d848db166f6751c2dcfb7e73007bc99818aa240dc42b height=824189
btcpayserver_bitcoind        | 2024-01-03T16:54:57Z [net] Saw new cmpctblock header hash=00000000000000000003d848db166f6751c2dcfb7e73007bc99818aa240dc42b peer=22
btcpayserver_bitcoind        | 2024-01-03T16:54:58Z UpdateTip: new best=00000000000000000003d848db166f6751c2dcfb7e73007bc99818aa240dc42b height=824189 version=0x33dce000 log2_work=94.643251 tx=947311059 date='2024-01-03T16:54:38Z' progress=1.000000 cache=25.1MiB(104766txo)
btcpayserver_bitcoind        | 2024-01-03T16:56:41Z Saw new header hash=000000000000000000035e5453258f7158c91998fc50508b5c763e346c72a4bb height=824190
btcpayserver_bitcoind        | 2024-01-03T16:56:41Z [net] Saw new cmpctblock header hash=000000000000000000035e5453258f7158c91998fc50508b5c763e346c72a4bb peer=453
btcpayserver_bitcoind        | 2024-01-03T16:56:41Z UpdateTip: new best=000000000000000000035e5453258f7158c91998fc50508b5c763e346c72a4bb height=824190 version=0x20c00000 log2_work=94.643266 tx=947313902 date='2024-01-03T16:56:16Z' progress=1.000000 cache=25.6MiB(111250txo)

I am not sure what is going on here. Some technical support would be nice!

I'm running BTCPay v1.11.6+44a7e9387

[dennisreimann]

Can you use a bloick explorer and check the address to see if it got picked up by the mempools and what's the state of that transaction?

[NicolasDorier]

Hey @Displee sorry for being late.

You mention bc1q04s3m84thk7c0glkp9akzleaz3de492je8lnev but this isn't in the transaction e64e979e44726a0768b7226929fdcf5cd051dc5f406c074f4d0872ff2e5b5e36

[NicolasDorier]

Sorry, so:

You Received money on bc1q04s3m84thk7c0glkp9akzleaz3de492je8lnev from tx e64e979e44726a0768b7226929fdcf5cd051dc5f406c074f4d0872ff2e5b5e36

Then it left on 89508e80b520133fe4b162d619cc76c18c72c731265f1878f66abc3780a61279.

There is no exploit known at this point.

1. Is your server public? (everybody can register)
2. Have you installed plugins?

[Displee]

My server is public indeed. https://btcpay.displee.com

Nobody can register.

My installed plugins:

[NicolasDorier]

Your server has registration off, which is good, I highly doubt that this problem come from BTCPay, but let's see if we can dig what happened.

Check in "Server settings", and Users that you are the only user.

[Displee]

Let's continue on chat.btcpayserver.org, that's a bit easier.

[Displee]

No problem. Thanks for responding.

Not sure what you mean by that. The address is in the transaction?

[NicolasDorier]

Yes you are right. Can you reply to #5644 (reply in thread)

I'm coming back in 30min, you can also ping me DM on https://chat.btcpayserver.org/ after it's easier for back and forth.

[NicolasDorier]

So after investigation on https://chat.btcpayserver.org/ it seems @Displee machine is infected with some malware which replace things in the clipboard.

It doesn't come from a browser extension, and work across browser, but seems reproductible, also on other websites. :(
Closing here, we should communicate if we manage to pinpoint the malware doing that.