#ElectrumFixesHighRiskExploitInVersionsBefore4.8.3
⚠️ Electrum users: update to 4.8.3 now🚨
Electrum has patched a high-severity vulnerability that affected every version before .8.34.
What the flaw allowed: malicious servers could swap a legitimate payment for an invalidly-signed transaction. When the user raised the fee with Replace-By-Fee (RBF), the bitcoin was stolen — one fraudulent transaction even carried a zero fee.
How the attack looked: destination addresses whose last four characters matched the real one, so the swap was easy to miss at a glance.
Timeline: two private reports — dannydeezy on Oct 11 and Raju-K12 on Oct 18 — documented the transaction substitution and a confirmed loss after a fee increase.
The fix: version 4.8.3 verifies signatures on unconfirmed transactions that spend wallet coins and rejects invalid ones.
What to do: • Upgrade to 4.8.3 or later • Verify the destination address and fee before signing every transaction • Treat this as a wallet-software issue, not a Bitcoin network or protocol flaw
Stay safe out there. 🔐
$NEAR $DOGE $TRB
⚠️ Electrum users: update to 4.8.3 now🚨
Electrum has patched a high-severity vulnerability that affected every version before .8.34.
What the flaw allowed: malicious servers could swap a legitimate payment for an invalidly-signed transaction. When the user raised the fee with Replace-By-Fee (RBF), the bitcoin was stolen — one fraudulent transaction even carried a zero fee.
How the attack looked: destination addresses whose last four characters matched the real one, so the swap was easy to miss at a glance.
Timeline: two private reports — dannydeezy on Oct 11 and Raju-K12 on Oct 18 — documented the transaction substitution and a confirmed loss after a fee increase.
The fix: version 4.8.3 verifies signatures on unconfirmed transactions that spend wallet coins and rejects invalid ones.
What to do: • Upgrade to 4.8.3 or later • Verify the destination address and fee before signing every transaction • Treat this as a wallet-software issue, not a Bitcoin network or protocol flaw
Stay safe out there. 🔐
$NEAR $DOGE $TRB