Electrum disclosed on October 24 a flaw in its Bitcoin wallet that could turn a routine fee increase into an unintended payment to an attacker. Malicious servers could substitute an unconfirmed wallet-history entry with an attacker’s address when a user approved a replacement transaction. Developers reported two affected users, including one who lost money, but the disclosure did not establish a total loss figure. Version 4.8.3 fixes the flaw, with signed downloads available from Electrum’s official site. Users must still check the recipients and amounts of every transaction approval because an update cannot reverse a transfer already confirmed to the wrong recipient.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
