Pay a Bitcoin transaction fee top-up, and the funds in your wallet could be redirected
On October 24, Electrum disclosed a high-severity vulnerability affecting versions before 4.8.3. After intercepting a transaction, a malicious server could replace the address recorded in the wallet with a fake one. If you used the RBF feature to increase the transaction fee, an older wallet would sign the fake transaction.
The team said it had received two reports so far. Some users had already fallen victim and lost coins; in one case, even the last four digits of the fake address matched those of the original.
The vulnerability has been fixed in version 4.8.3. If you’re still using an older version, update it from the official website right away. And be sure to check recipient addresses carefully—don’t download anything from suspicious links. High-severity vulnerability in versions before 4.8.3
On October 24, Electrum disclosed a high-severity vulnerability affecting versions before 4.8.3. After intercepting a transaction, a malicious server could replace the address recorded in the wallet with a fake one. If you used the RBF feature to increase the transaction fee, an older wallet would sign the fake transaction.
The team said it had received two reports so far. Some users had already fallen victim and lost coins; in one case, even the last four digits of the fake address matched those of the original.
The vulnerability has been fixed in version 4.8.3. If you’re still using an older version, update it from the official website right away. And be sure to check recipient addresses carefully—don’t download anything from suspicious links. High-severity vulnerability in versions before 4.8.3