Electrum wallet patches high‑severity flaw after two Bitcoin thefts
Image: Crypto.newsElectrum released version 4.8.3 on October 24 to fix a high‑severity vulnerability. The flaw let malicious servers replace pending Bitcoin payments with fraudulent transactions that could be approved via fee bumps. Two users reported losing Bitcoin in October, one on the 11th and another on the 18th. The patch adds signature checks for unconfirmed transactions. Developers have not disclosed total losses.
Key points
- Electrum issued version 4.8.3 on October 24 to address a high‑severity vulnerability.
- The vulnerability allowed malicious servers to replace unconfirmed Bitcoin transactions with unsigned fraudulent ones.
- The patch adds signature verification for unconfirmed transactions that spend wallet coins.
- The issue affected all Electrum versions released before 4.8.3.
Why it matters
Users of Electrum wallets were exposed to theft through manipulated pending payments, but the October 24 update mitigates the risk by enforcing signature checks.
What's unclear
The total amount of Bitcoin stolen has not been disclosed.
The specific malicious servers involved have not been identified.
Price context · BTC
At publication
$80,270.00
Now
$79,631.00
Change since
−0.80%
7 days · dashed line = publication
Sources · 3 publishers
Crypto.news
Tier 2
Electrum wallet fixes security flaw after hackers steal Bitcoin
Bitcoinist
Tier 2
Electrum Wallet Flaw Allowed Servers To Trick Users Into Paying Hackers
Coverage timeline
- First reported by The Defiant
- Also reported by Crypto.news
- CryptoVideos brief published
How this page is checked. AI drafted this brief from selected independent reports. Automated checks compare numbers, source coverage and topic terms, but may miss errors. Publication and evidence refreshes run automatically. Read the linked reports for context. Report an error
NEXO
−1.9%
