$ETH
The money wasn’t sent to the wrong place,
but your coins could still be gone
Critical vulnerability discovered in Electrum wallet
Even speeding up a transaction can become a trap
Damn,
guys,
when it comes to wallet security,
you really can’t assume you’re safe just because you hold your own private keys.
A critical vulnerability was recently disclosed in Electrum, a long-established Bitcoin software wallet.
Attackers could use malicious servers
to replace a transaction a user has just broadcast with a fake one,
then make the wallet show a transaction that appears stuck and needs a higher miner fee.
The most insidious part is,
you might think you’re just clicking to speed up a transaction,
but you could actually be signing a transaction that sends BTC to an attacker’s address.
The official security advisory has confirmed receiving two related reports.
In one case, a user lost funds after increasing the fee.
The exact amount stolen has not yet been disclosed.
This doesn’t mean all Electrum users have been affected,
but users of older versions should no longer take any chances.
Electrum has now released version 4.8.3 to fix the vulnerability.
If you’re still using an older version,
check the official website and upgrade right away.
If you must sign a transaction before upgrading,
be sure to verify the full recipient address and amount.
Don’t just check the last few characters of the address.
If you see an unfamiliar or unusual pending transaction,
stop.
Don’t rush to add a transaction fee.
#electrum钱包漏洞致资金被盗
The money wasn’t sent to the wrong place,
but your coins could still be gone
Critical vulnerability discovered in Electrum wallet
Even speeding up a transaction can become a trap
Damn,
guys,
when it comes to wallet security,
you really can’t assume you’re safe just because you hold your own private keys.
A critical vulnerability was recently disclosed in Electrum, a long-established Bitcoin software wallet.
Attackers could use malicious servers
to replace a transaction a user has just broadcast with a fake one,
then make the wallet show a transaction that appears stuck and needs a higher miner fee.
The most insidious part is,
you might think you’re just clicking to speed up a transaction,
but you could actually be signing a transaction that sends BTC to an attacker’s address.
The official security advisory has confirmed receiving two related reports.
In one case, a user lost funds after increasing the fee.
The exact amount stolen has not yet been disclosed.
This doesn’t mean all Electrum users have been affected,
but users of older versions should no longer take any chances.
Electrum has now released version 4.8.3 to fix the vulnerability.
If you’re still using an older version,
check the official website and upgrade right away.
If you must sign a transaction before upgrading,
be sure to verify the full recipient address and amount.
Don’t just check the last few characters of the address.
If you see an unfamiliar or unusual pending transaction,
stop.
Don’t rush to add a transaction fee.
#electrum钱包漏洞致资金被盗
