I tried to speed up confirmation by increasing the fee, but ended up signing my coins over to a hacker.

Electrum has disclosed that versions earlier than 4.8.3 can be tricked by malicious servers into intercepting a transaction you just broadcast and inserting a conflicting transaction to an attacker-controlled address into your wallet history. If you bump the fee using RBF, the older version may sign the fake transaction as a genuine transfer. Even worse, the last four digits of the recipient address are often altered to match those of the intended recipient. The zero-fee fake transaction is deliberately left pending to lure you into bumping the fee yourself.

The timeline is clear: on October 11, someone first discovered that transaction history had been swapped out, while the funds were still safe; on October 18, a second incident confirmed that funds were stolen after a fee bump, though the amount has not been disclosed. Patch 4.8.3 wasn’t released until October 24. The team says some servers are already being exploited in the wild. Self-hosted servers and users who connect only to trusted nodes are unaffected. Until you upgrade, verify the full recipient address and amount before signing any transaction, including fee bumps. Only download the installer from the official website, and verify it with GPG.

The broader market is just background: BTC is around 80,082 on Binance and 80,083 on OKX, down about 0.6% over 24 hours. This piece is about a wallet-signing trap, not market movements.

#Electrum钱包漏洞致资金被盗 #Electrum #钱包安全 #BTC

On the 11th, only the transaction swap was detected; on the 18th, coins were lost only after the fee was raised—are you still using a version earlier than 4.8.3?

View live: https://www.coinboss.com/currencies/BTC