Bitcoin Fee Bumps Became an Attack Route – Patch Released

1 hour ago 4

Rommie Analytics

Key Takeaways

High-severity flaw fixed in Electrum version 4.8.3

Two users reported attacks; one lost money

Fake addresses matched the last four characters

Trusted or self-run servers were not affected

Electrum developer SomberNight disclosed the issue in an October 24 security advisory, saying some servers are carrying out the attack in the wild.

The attack needs the owner’s signature

A malicious server cannot spend anyone’s Bitcoin on its own. The fake transaction it plants carries invalid signatures, so the network would reject it. What the attacker needs is a valid signature from the Read Entire Article