Electrum 4.8.3 Affected by Critical Vulnerability

Electrum has disclosed a critical security vulnerability that allows malicious servers to trick users into sending Bitcoin to the attacker's address while increasing transaction fees. The attacker can intercept the broadcasted transaction and replace it with a forged transaction, resulting in the loss of user funds. When users increase fees through Replace-by-Fee (RBF), Electrum may sign the malicious transaction. Electrum has confirmed receiving two reports related to this issue, with one user losing funds. The attacker generated an address that matches the last four digits of the expected recipient address. This vulnerability affects versions prior to 4.8.3 and has been fixed in version 4.8.3. Electrum advises users to update immediately and verify all recipient addresses and amounts before signing transactions.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.