Electrum patched a critical security flaw that allowed malicious servers to replace a pending transaction with a fraudulent transaction sending funds to the attacker’s wallet when the user increased the fee. Two reports reportedly revealed the vulnerability, including one from a user who actually lost funds. Users need to install the updated version and avoid increasing fees on a pending transaction. Keystone also fixed a data breach that exposed the names, contact details, delivery addresses and order information of certain customers, but not their payment or banking details, potentially exposing them to targeted phishing.
Source: Read the original article


