Electrum Fixes Bitcoin Wallet Flaw That Could Turn A Fee Bump Into Theft
Summary
Electrum disclosed a wallet flaw that let malicious servers alter unconfirmed transaction history. Users approving a replacement transaction to raise a fee could inadvertently pay an attacker. Developers reported two affected users, one of whom lost money, but gave no total loss figure. Electrum says version 4.8.3 fixes the weakness and advises downloading from its official site and verifying signatures. A fee bump requires fresh review of the recipient and amount; updating cannot reverse a transfer already confirmed to the wrong address.
