Electrum fixes high severity wallet flaw after attackers exploit fee bump bug

Electrum, a widely used Bitcoin wallet, has patched a critical vulnerability that allowed attackers to steal funds from users attempting to increase transaction fees, a process known as “fee bumping.” The issue, present in all versions before 4.8.3, was addressed in an updated release published on October 24, following reports of active exploitation. Electrum relies on remote servers to provide information about the status of unconfirmed Bitcoin transactions. This design gives those servers considerable influence over what is displayed in the user’s wallet. According to Electrum’s developers, a malicious server could manipulate the wallet into displaying a rival version of a pending transaction—one that redirects payment from the intended recipient to the attacker.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to CoinTurk News.