Electrum patched a security flaw that allowed malicious servers to redirect payments when users manually increased transaction fees. Attackers concealed their payment addresses by matching the last four characters of legitimate recipients’ addresses, deceiving users who checked only part of the details. The developers confirmed active exploitation and the theft of Bitcoin from at least one user, but the number of compromised wallets and the total amount stolen remain unknown. Version 4.8.3, released on October 24, adds signature checks to unconfirmed transactions, while clients connected exclusively to trusted servers are not exposed to the attack.
Source: Read the original article
Disclaimer: this content is for information purposes only and is not financial advice. Cryptocurrencies are highly volatile: you may lose all of your capital. Always do your own research. Legal notice
