Electrum wallet fixes security flaw after hackers steal Bitcoin

cryptonews10-25 18:40

Electrum has released version 4.8.3 to fix a high-severity Bitcoin wallet vulnerability that malicious servers have exploited to redirect user payments, with developers confirming at least one case of...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2678413833?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-10-25 18:40","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2678413833","market":"fut","top_or_hot":-1,"title":"Electrum wallet fixes security flaw after hackers steal Bitcoin","media":"cryptonews","content":"<div>\n<p>Electrum has released version 4.8.3 to fix a high-severity Bitcoin wallet vulnerability that malicious servers have exploited to redirect user payments, with developers confirming at least one case of...</p>\n\n<a href=\"https://crypto.news/electrum-wallet-bitcoin-theft-security-flaw-4-8-3/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Electrum wallet fixes security flaw after hackers steal Bitcoin</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nElectrum wallet fixes security flaw after hackers steal Bitcoin\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-10-25 18:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/electrum-wallet-bitcoin-theft-security-flaw-4-8-3/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Electrum has released version 4.8.3 to fix a high-severity Bitcoin wallet vulnerability that malicious servers have exploited to redirect user payments, with developers confirming at least one case of...</p>\n\n<a href=\"https://crypto.news/electrum-wallet-bitcoin-theft-security-flaw-4-8-3/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"CBTO","symbol_name":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - October","start_time":0,"source_url":"https://crypto.news/electrum-wallet-bitcoin-theft-security-flaw-4-8-3/","article_id":"2678413833","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/electrum-wallet-bitcoin-theft-security-flaw-4-8-3/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2678413833","pubTimestamp":1792924856,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"Electrum has released version 4.8.3 to fix a high-severity Bitcoin wallet vulnerability that malicious servers have exploited to redirect user payments, with developers confirming at least one case of stolen funds.Electrum released version 4.8.3 after confirming that malicious servers were exploiting a high-severity vulnerability.Attackers replaced pending Bitcoin payments with fraudulent transactions that users could mistakenly authorize through fee bumps.Two users reported incidents, including one who lost Bitcoin after increasing a transaction fee.The vulnerability affected every Electrum version before 4.8.3; developers have not disclosed total losses.The security patch verifies signatures on unconfirmed transactions spending coins controlled by the wallet.According to the wallet’s October 24 security advisory, attackers exploited how Electrum handled unconfirmed Bitcoin transactions, replacing legitimate outgoing payments with fraudulent ones that users could accidentally authoriz","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"CBTO":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - October","SBIT":"2倍做空比特币期货ETF-Proshares","BETE":"等权重比特币&以太币期货ETF-ProShares","CBOO":"Calamos Bitcoin Structured Alt Protection ETF - October","CBTY":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - July","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","BETH":"比特币&以太币期货ETF-ProShares","EZBC":"比特币ETF-Franklin","FBTC":"比特币ETF-Fidelity","BTCW":"比特币ETF-Wisdom Tree","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","CBOY":"Calamos Bitcoin Structured Alt Protection ETF - July","BITI":"1倍做空比特币期货ETF-Proshares","BTF":"比特币&以太币期货ETF-CoinShares","CBXJ":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - January","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","DEFI":"比特币期货ETF-Hashdex","BITO":"比特币期货ETF-ProShares","MAXI":"比特币期货ETF-Simplify","BTC":"Grayscale Bitcoin Mini Trust","XBTY":"GraniteShares YieldBOOST Bitcoin ETF","CBXO":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - October","BRRR":"比特币ETF-CoinShares","BTRN":"比特币期货ETF-Global X","BPI":"Grayscale Bitcoin Premium Income ETF","BTCC":"Grayscale Bitcoin HIGH Income ETF","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","DFII":"FT Cboe Vest Bitcoin Strategy & Target Income ETF","BAGY":"Amplify Bitcoin Max Income Covered Call ETF","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","YBTC":"比特币看涨期权ETF-Roundhill","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","GBTC":"比特币ETF-Grayscale","BITU":"2倍做多比特币期货ETF-Proshares","BTCI":"NEOS Bitcoin High Income ETF","ARKB":"比特币ETF-21Shares","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","CBTA":"Calamos Bitcoin 80 Series Structured Alt Protection ETF – April","BCCC":"Global X Bitcoin Covered Call ETF","MNRS":"GRAYSCALE BITCOIN MINERS ETF","HODL":"比特币ETF-VanEck","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","BITX":"2倍比特币期货ETF-Volatility Shares","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January","BTCO":"比特币ETF-Invesco Galaxy","BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","BITB":"比特币ETF-Bitwise","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly"},"translate_title":"黑客窃取比特币后，Electrum 钱包修复了安全漏洞","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"CBOA":0.6,"DFII":0.6,"BTCW":0.6,"BETH":0.6,"BTF":0.6,"BTRN":0.6,"CBOY":0.6,"EZBC":0.6,"CBXJ":0.6,"BTCO":0.6,"BITI":0.6,"CBOJ":0.6,"ARKB":0.6,"QBF":0.6,"BITO":0.6,"MAXI":0.6,"CBTA":0.6,"XBTY":0.6,"BPI":0.6,"BITU":0.6,"CBXO":0.6,"SBIT":0.6,"BAGY":0.6,"BTC":0.6,"BETE":0.6,"BTCC":0.6,"BTCZ":0.6,"BITY":0.6,"CBOO":0.6,"CBXY":0.6,"YBTC":0.6,"BFAP":0.6,"BTCL":0.6,"CBXA":0.6,"DEFI":0.6,"BCCC":0.6,"CBTY":0.6,"MNRS":0.6,"FBTC":0.6,"CBTO":0.6,"BITB":0.6,"BFJL":0.6,"BITX":0.6,"BRRR":0.6,"GBTC":0.6,"BTCI":0.6,"HODL":0.6,"CBTJ":0.6},"content_text":"Electrum has released version 4.8.3 to fix a high-severity Bitcoin wallet vulnerability that malicious servers have exploited to redirect user payments, with developers confirming at least one case of stolen funds.\n\n\nSummary\n\n\n\nElectrum released version 4.8.3 after confirming that malicious servers were exploiting a high-severity vulnerability.\nAttackers replaced pending Bitcoin payments with fraudulent transactions that users could mistakenly authorize through fee bumps.\nTwo users reported incidents, including one who lost Bitcoin after increasing a transaction fee.\nThe vulnerability affected every Electrum version before 4.8.3; developers have not disclosed total losses.\nThe security patch verifies signatures on unconfirmed transactions spending coins controlled by the wallet.\n\n\n\nAccording to the wallet’s October 24 security advisory, attackers exploited how Electrum handled unconfirmed Bitcoin transactions, replacing legitimate outgoing payments with fraudulent ones that users could accidentally authorize while increasing transaction fees.\nElectrum is a lightweight Bitcoin wallet that connects to external servers for transaction histories, broadcasting and other network information. Unlike a full Bitcoin node, the software does not independently process every aspect of blockchain activity.\n\nNew release: Electrum 4.8.3. This release fixes a critical security issue, so we urge all users to upgrade. A description of the vulnerability will be published later today. (note: Windows Defender may show a warning about ZXing.dll, ignore that, it is a false positive)— Electrum (@ElectrumWallet) October 24, 2026\n\nIts documentation explains that Electrum verifies confirmed transactions through Simple Payment Verification but has historically trusted its main server when displaying pending transactions.\nAttackers exploited this distinction by intercepting transactions submitted through malicious servers before they reached the Bitcoin network.\nAfter preventing a legitimate transaction from being broadcast, an attacker could send the wallet a replacement transaction that changed the receiving address to one under the attacker’s control.\nAlthough the replacement carried invalid signatures, vulnerable Electrum versions did not check them before displaying the transaction in the wallet’s history.\nThe deception became dangerous when users tried to increase the transaction fee through Replace-by-Fee, or RBF, a Bitcoin feature that allows an unconfirmed payment to be replaced with another paying a higher fee.\nBy approving the fee adjustment, users could unknowingly sign a valid transaction paying the attacker.\nElectrum confirms real-world exploitation and Bitcoin losses\nDevelopers disclosed two privately reported incidents, establishing that the vulnerability had moved beyond a theoretical attack.\nOn October 11, a user identified as dannydeezy reported that a transaction displayed in Electrum’s history did not match the payment originally submitted.\nA second user, Raju-K12, contacted developers on October 18 after losing funds while attempting to increase a transaction fee.\nAccording to the advisory, both incidents involved attacker-controlled receiving addresses designed to match the final four characters of the intended recipient’s Bitcoin address.\nIn the second case, the fraudulent transaction carried a zero fee, which developers suspected was intended to encourage the victim to initiate a fee increase.\nThe first report involved a two-of-three multisignature wallet using two Trezor devices. Its legitimate transaction contained 31 inputs and one output.\nInvestigators found that all 62 signatures were valid for the original payment but invalid for the substituted transaction. The fake redirected nearly all the Bitcoin to a lookalike address and returned a small amount to the wallet.\nThe original transaction remained valid but had never reached the public Bitcoin network.\nElectrum acknowledged that some servers were performing the attack in the wild. However, developers have not disclosed how many servers participated, the amount stolen or whether additional victims have been identified.\nElectrum 4.8.3 blocks malicious fee-bump transactions\nThe fix was incorporated into version 4.8.3 on October 23, with downloadable binaries released on October 24.\nThrough commit 90fe308, developers introduced signature verification for unconfirmed transactions spending inputs owned by the user’s wallet.\nElectrum now checks those signatures before accepting the transactions into its local history, preventing the fraudulent outgoing payments described in the advisory from appearing as legitimate transactions.\nThe update does not make Electrum a full Bitcoin node. Developers clarified that incoming unconfirmed transactions remain outside the new signature checks, while confirmed payments continue to undergo existing verification procedures.\nUsers running versions before 4.8.3 have been urged to download the update from the official Electrum website.\nFor anyone unable to upgrade immediately, developers recommend checking complete receiving addresses and amounts before signing transactions, including fee replacements.\nAccording to the advisory, users connecting exclusively to trusted servers, including their own, are not exposed to this particular malicious-server attack.\nElectrum’s previous attacks reveal recurring server risks\nThe incident follows previous attempts to exploit Electrum’s reliance on outside servers.\nIn December 2018, crypto.news reported that malicious servers had displayed fraudulent software-update instructions to users. Contemporary reports estimated losses approaching $1 million.\nAnother malicious-server campaign in 2019 used fake wallet updates and denial-of-service activity to redirect users toward compromised software.\nThose attacks relied on deceptive downloads, while the newly patched vulnerability manipulated pending transaction information inside an otherwise legitimate wallet.\nAn interview about Electrum servers published in 2020 examined the trade-offs of lightweight wallets, including their reliance on external infrastructure for transaction histories.\nElectrum’s own documentation says its client typically connects to approximately 10 servers, but selects one main server to retrieve wallet history and broadcast transactions. The documentation states that this main server is trusted regarding unconfirmed transactions.\n\n\n\n\n\n                Read more:\n            \n\n                Keystone wallet hack exposes buyers’ home addresses, sparking security fears","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.52.0","shortVersion":"4.52.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2678413833","isCrawlerRequest":true}