TREE NEWS update: Electrum users on any version before 4.8.3 who connect to public servers should upgrade to 4.8.3, which shipped Oct. 24 after at least one user lost funds to an attack by malicious servers. The servers baited users into fee bumps to steal bitcoin. Users on older versions remain exposed when connecting to public servers.
Electrum Warns Users to Upgrade to 4.8.3 After Malicious Servers Steal Bitcoin
The exposure here is structural rather than a one-off bug: it sits in the default behavior of connecting to public servers, which is how most Electrum users actually operate, so the affected population is defined by habit rather than by any single incident. The attack's mechanism — luring users into approving fee bumps — targets routine wallet interaction, meaning caution alone is weak protection once a malicious server is in the path. The open question is how many older clients remain in circulation and whether public-server reliance itself gets revisited as a security assumption.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.