⚡️All versions of Electrum prior to 4.8.3 have a critical vulnerability, and people have already lost coins
What we know:
Electrum’s official account disclosed on X that all versions prior to 4.8.3 are affected by this critical vulnerability. A malicious server can intercept a transaction you’ve just broadcast and replace it in your wallet history with a conflicting transaction that pays the attacker’s address.
If you then use RBF to increase the fee, your wallet will sign the transaction and send your coins to the attacker.
Servers are already exploiting this in the wild. Two users have reported related incidents, including one who lost coins while increasing the fee. The amount hasn’t been disclosed.
My take:
This isn’t a vulnerability that’s merely “theoretically possible”—people have already fallen victim. Users on older versions are currently completely exposed.
What I’d do:
If you’re using a version earlier than 4.8.3, upgrade to 4.8.3 immediately. Before upgrading, double-check the recipient address and amount every time you sign a transaction, including when increasing the fee.
If the official team later clarifies that there was no exploitation in the wild, then the urgency of this post should be downgraded.
Are you currently using Electrum or another wallet?
$BTC $ETH $SOL
#比特币 #WalletSecurity
What we know:
Electrum’s official account disclosed on X that all versions prior to 4.8.3 are affected by this critical vulnerability. A malicious server can intercept a transaction you’ve just broadcast and replace it in your wallet history with a conflicting transaction that pays the attacker’s address.
If you then use RBF to increase the fee, your wallet will sign the transaction and send your coins to the attacker.
Servers are already exploiting this in the wild. Two users have reported related incidents, including one who lost coins while increasing the fee. The amount hasn’t been disclosed.
My take:
This isn’t a vulnerability that’s merely “theoretically possible”—people have already fallen victim. Users on older versions are currently completely exposed.
What I’d do:
If you’re using a version earlier than 4.8.3, upgrade to 4.8.3 immediately. Before upgrading, double-check the recipient address and amount every time you sign a transaction, including when increasing the fee.
If the official team later clarifies that there was no exploitation in the wild, then the urgency of this post should be downgraded.
Are you currently using Electrum or another wallet?
$BTC $ETH $SOL
#比特币 #WalletSecurity
