Critical Electrum wallet vulnerability exposed: RBF fee-bumping feature provides an opening for attacks
#Electrum fixes critical vulnerability in versions before 4.8.3
A critical vulnerability has been discovered in Electrum, putting users of many older wallet versions at risk of having their funds stolen.
The vulnerability affects versions before 4.8.3. The attack is highly stealthy: a malicious server intercepts a user's transaction and replaces it with a forged one. When the user uses RBF to increase the fee and speed up the transaction, the older wallet signs the fake transaction, allowing the funds to be transferred directly to the attacker.
Attackers also deliberately make the last four characters of the recipient address match those of the original address, making the difference very difficult to spot at a glance and the deception highly convincing. The developers have received reports of two attacks, and users have already lost funds.
The vulnerability has now been fixed in version 4.8.3.
Many people regularly use RBF to increase transaction fees and speed up Bitcoin confirmations. This frequent operation has now become a point of risk. Many users rarely check their wallet version and may unknowingly keep using an older one.
If you use Electrum, upgrade to version 4.8.3 as soon as possible through official channels. Before every transfer, carefully verify the full recipient address and the amount—don't check only the last few characters. Avoid installation files from unofficial websites or unfamiliar links to steer clear of fake-wallet traps.
Wallet security is no small matter. This vulnerability is a warning to everyone participating on-chain.
Do you regularly check your wallet version?
#Electrum fixes critical vulnerability in versions before 4.8.3
A critical vulnerability has been discovered in Electrum, putting users of many older wallet versions at risk of having their funds stolen.
The vulnerability affects versions before 4.8.3. The attack is highly stealthy: a malicious server intercepts a user's transaction and replaces it with a forged one. When the user uses RBF to increase the fee and speed up the transaction, the older wallet signs the fake transaction, allowing the funds to be transferred directly to the attacker.
Attackers also deliberately make the last four characters of the recipient address match those of the original address, making the difference very difficult to spot at a glance and the deception highly convincing. The developers have received reports of two attacks, and users have already lost funds.
The vulnerability has now been fixed in version 4.8.3.
Many people regularly use RBF to increase transaction fees and speed up Bitcoin confirmations. This frequent operation has now become a point of risk. Many users rarely check their wallet version and may unknowingly keep using an older one.
If you use Electrum, upgrade to version 4.8.3 as soon as possible through official channels. Before every transfer, carefully verify the full recipient address and the amount—don't check only the last few characters. Avoid installation files from unofficial websites or unfamiliar links to steer clear of fake-wallet traps.
Wallet security is no small matter. This vulnerability is a warning to everyone participating on-chain.
Do you regularly check your wallet version?