Electrum patched a flaw that allowed malicious servers to redirect Bitcoin payments initiated by users to an attacker’s address. The trap occurred when a user increased the fee on a slow payment to speed it up, causing a fake transaction to replace the legitimate payment and send the funds to the attacker. Developers received two reports, including one involving lost funds, and said the method did not require stealing private keys or compromising Bitcoin’s security. All versions before Electrum 4.8.3 are affected; the update adds checks on pending payments, and developers urged users to upgrade their software.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
