Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers
Summary
Electrum released version 4.8.3 to fix a high-severity flaw that let malicious servers falsify unconfirmed Bitcoin transactions. Users who fee-bumped the apparently stalled payments could sign a new transaction sending funds to an attacker. The developers said the attack was occurring in the wild and cited two reports, including one confirmed loss. The patch verifies signatures on wallet-owned inputs before displaying unconfirmed transactions; incoming transactions from external senders remain outside this check. Users should update or carefully verify transaction addresses and amounts before signing.
