Malicious Electrum Servers Steal Bitcoin by Baiting Users Into Fee Bumps
By Unchained
AI summary of the source article
Electrum developers issued a security advisory on Oct. 24 for a high-severity vulnerability exploited in the wild. Affecting versions before 4.8.3, the flaw allowed malicious servers to trick users bumping transaction fees into sending bitcoin to attackers.
Key facts
- Electrum developers published a high-severity security advisory on Oct. 24 regarding an exploit affecting every release before version 4.8.3.
- Dishonest servers presented forged unconfirmed transactions that swapped destination addresses, baiting users into signing fee-bump replacements that paid attackers.
- Electrum version 4.8.3 was released on Oct. 24, adding signature verification for mempool transactions spending the wallet's own coins.
Source excerpt · Unchained
Electrum users on any version before 4.8.3 who connect to public servers should upgrade to 4.8.3, which shipped Oct. 24 after at least one user lost funds to the attack. The post Malicious Electrum Servers Steal Bitcoin by Baiting Users Into Fee Bumps appeared first on Unchained .