Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers

Decrypt10-26 17:41

In brief Bitcoin wallet Electrum released version 4.8.3 on October 24 with a patch for a high-severity exploit that let malicious servers inject fake transactions and trick users into paying attacker ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2678118484?lang=en_US&edition=fundamental","thumbnail":"https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2025/06/bitcoin-decrypt-style-wallet-gID_7.jpg@webp","is_english":true,"pubTime":"2026-10-26 17:41","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2678118484","market":"nz","top_or_hot":-1,"title":"Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers","media":"Decrypt","content":"<div>\n<p>In brief\nBitcoin wallet Electrum released version 4.8.3 on October 24 with a patch for a high-severity exploit that let malicious servers inject fake transactions and trick users into paying attacker ...</p>\n\n<a href=\"https://decrypt.co//381844/bitcoin-wallet-flaw-trick-users-paying-attackers\">Source Link</a>\n\n</div>\n","source":"decrypt_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nBitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-10-26 17:41 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://decrypt.co//381844/bitcoin-wallet-flaw-trick-users-paying-attackers><strong>Decrypt</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>In brief\nBitcoin wallet Electrum released version 4.8.3 on October 24 with a patch for a high-severity exploit that let malicious servers inject fake transactions and trick users into paying attacker ...</p>\n\n<a href=\"https://decrypt.co//381844/bitcoin-wallet-flaw-trick-users-paying-attackers\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"BTCL","symbol_name":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","start_time":0,"source_url":"https://decrypt.co//381844/bitcoin-wallet-flaw-trick-users-paying-attackers","article_id":"2678118484","we_media_id":null,"thumbnails":["https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2025/06/bitcoin-decrypt-style-wallet-gID_7.jpg@webp"],"rights":{"source":"decrypt_highlight","url":"https://decrypt.co//381844/bitcoin-wallet-flaw-trick-users-paying-attackers","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2678118484","pubTimestamp":1793007681,"columns":[],"sourceInfo":{"source_id":"decrypt_highlight","name":"Decrypt"},"weMediaInfo":null,"summary":"Bitcoin wallet Electrum patched a high-severity vulnerability this weekend that allowed rogue servers to manipulate pending Bitcoin transactions and redirect funds to attacker-controlled addresses. The flaw affects all versions before 4.8.3, which is now available.\nAt least one user has confirmed losing money to the exploit.\nMyriad: How high will Bitcoin go? Click to make your prediction.\nElectrum is one of the oldest Bitcoin software wallets around. The attack exploits the wallet’s trust model...","collect":0,"end_time":0,"defaultTopTitle":"decrypt.co","property":[],"viewcount":null,"language":"en","relate_stocks":{"BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","BTCO":"比特币ETF-Invesco Galaxy","SBIT":"2倍做空比特币期货ETF-Proshares","BITB":"比特币ETF-Bitwise","BTF":"比特币&以太币期货ETF-CoinShares","CBOO":"Calamos Bitcoin Structured Alt Protection ETF - October","CBTO":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - October","BITC":"Bitwise Trendwise Bitcoin and Treasuries Rotation Strategy ETF","BTRN":"比特币期货ETF-Global X","FBTC":"比特币ETF-Fidelity","BETE":"等权重比特币&以太币期货ETF-ProShares","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","CBTY":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - July","BETH":"比特币&以太币期货ETF-ProShares","BTCW":"比特币ETF-Wisdom Tree","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","DEFI":"比特币期货ETF-Hashdex","BITI":"1倍做空比特币期货ETF-Proshares","MAXI":"比特币期货ETF-Simplify","CBOY":"Calamos Bitcoin Structured Alt Protection ETF - July","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","CBXJ":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - January","BITO":"比特币期货ETF-ProShares","IBIT":"比特币ETF-iShares","XBTY":"GraniteShares YieldBOOST Bitcoin ETF","BTC":"Grayscale Bitcoin Mini Trust","DFII":"FT Cboe Vest Bitcoin Strategy & Target Income ETF","BRRR":"比特币ETF-CoinShares","CBXO":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - October","BPI":"Grayscale Bitcoin Premium Income ETF","GBTC":"比特币ETF-Grayscale","BTCC":"Grayscale Bitcoin HIGH Income ETF","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","BAGY":"Amplify Bitcoin Max Income Covered Call ETF","MNRS":"GRAYSCALE BITCOIN MINERS ETF","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","HODL":"比特币ETF-VanEck","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","BITU":"2倍做多比特币期货ETF-Proshares","BTCI":"NEOS Bitcoin High Income ETF","ARKB":"比特币ETF-21Shares","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","BITX":"2倍比特币期货ETF-Volatility Shares","CBTA":"Calamos Bitcoin 80 Series Structured Alt Protection ETF – April","BCCC":"Global X Bitcoin Covered Call ETF","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly"},"translate_title":"比特币钱包修复了将资金重定向给攻击者的关键缺陷","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"FBTC":0.6,"BTCC":0.6,"BETH":0.6,"BTCZ":0.6,"CBOJ":0.6,"BFJL":0.6,"GBTC":0.6,"BITX":0.6,"SBIT":0.6,"HODL":0.6,"BITB":0.6,"BITO":0.6,"DFII":0.6,"BPI":0.6,"CBTY":0.6,"CBTO":0.6,"CBTA":0.6,"QBF":0.6,"BITC":0.6,"BTF":0.6,"CBOA":0.6,"MAXI":0.6,"CBOY":0.6,"BTCI":0.6,"BCCC":0.6,"CBOO":0.6,"CBXJ":0.6,"BTCW":0.6,"BAGY":0.6,"BRRR":0.6,"BITY":0.6,"ARKB":0.6,"BTCO":0.6,"CBXO":0.6,"BTCL":0.6,"BITU":0.6,"BTRN":0.6,"BITI":0.6,"MNRS":0.6,"IBIT":0.6,"BFAP":0.6,"BETE":0.6,"XBTY":0.6,"BTC":0.6,"CBXA":0.6,"CBXY":0.6,"CBTJ":0.6,"DEFI":0.6},"content_text":"In brief\nBitcoin wallet Electrum released version 4.8.3 on October 24 with a patch for a high-severity exploit that let malicious servers inject fake transactions and trick users into paying attacker addresses.\nAt least one user confirmed losing funds on October 18 after fee-bumping a server-manipulated transaction.\nThe fix verifies signatures on wallet-owned inputs before displaying unconfirmed transactions, but incoming transactions from external senders remain unverified.\nBitcoin wallet Electrum patched a high-severity vulnerability this weekend that allowed rogue servers to manipulate pending Bitcoin transactions and redirect funds to attacker-controlled addresses. The flaw affects all versions before 4.8.3, which is now available.At least one user has confirmed losing money to the exploit.Myriad: How high will Bitcoin go? Click to make your prediction.Electrum is one of the oldest Bitcoin software wallets around. The attack exploits the wallet’s trust model for unconfirmed transactions. When a user broadcasts a payment through a compromised server, the server can suppress the real transaction and inject a fake conflicting one—showing an attacker’s output address and zero fee, making the payment look stuck.Because Electrum doesn’t verify signatures on unconfirmed transactions from the server, the spoofed transaction appears in the wallet’s history as legitimate.When the user fee-bumps what looks like a stalled payment, they sign and broadcast a completely new valid transaction—one whose output address belongs to the attacker. The real payment was never sent; the fee-bump is the first transaction that actually hits the network, and it pays the attacker.Electrum developer SomberNight, who published the advisory, noted that attackers can grind the fake transaction’s output address to match the last four characters of the user’s intended destination. Anyone spot-checking only the tail of a long Bitcoin address would see an apparent match.BitcoinBTC · USD$80,231−2.08%24H7D1M1YYTDOct 19Oct 21Oct 23Oct 24Oct 26$84.8k$83.1k$81.3k$79.6k24h HighHigh$80,82524h LowLow$79,332VolVol$1.2B→Buy Bitcoin with USDTPowered by Jupiter$50$100$500BuyPrice data by CoinGeckoCoinGeckoMore Bitcoin news and projections →The advisory states that “some servers are performing this attack in the wild,” backed by two user reports. A user identified as dannydeezy first flagged the suspicious server behavior on October 11; the manipulated transaction never propagated past the local server, so no funds were lost. A second user, Raju-K12, reported a confirmed loss on October 18 after fee-bumping a manipulated transaction.The patch in 4.8.3 closes the main attack surface by verifying cryptographic signatures on wallet-owned inputs before adding any unconfirmed transaction to local history. A server can no longer inject a fake transaction touching the user’s own addresses without providing valid signatures—which the attacker cannot forge. The fix was tagged in the repository on October 23 and binaries were published the following day.Incoming transactions from external senders—where none of the inputs belong to the user’s wallet—are still accepted without signature verification. SomberNight acknowledged this gap in the advisory, noting it would require additional work to close.This isn’t Electrum’s first rodeo and it has dealt with malicious attacks in the past. A 2018 campaign used rogue servers to push fake update notifications, and by 2020 it had drained an estimated $25 million from Electrum users. Electrum’s open server model—anyone can run a node—is what makes this class of attack possible.Users who connect exclusively to a server they run themselves are not affected. Anyone who cannot update immediately should manually verify output addresses and amounts before signing any transaction; Electrum 4.8.3 is available at electrum.org alongside the project’s Github.Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more. Email addressJoin freeJoin 72,000+ readersCreate an account to save your articles.Add on GoogleAdd Decrypt as your preferred source to see more of our stories on Google.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.52.0","shortVersion":"4.52.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2678118484","isCrawlerRequest":true}