Key Takeaways
High-severity flaw fixed in Electrum version 4.8.3
Two users reported attacks; one lost money
Fake addresses matched the last four characters
Trusted or self-run servers were not affected
Electrum developer SomberNight disclosed the issue in an October 24 security advisory, saying some servers are carrying out the attack in the wild.
The attack needs the owner’s signature
A malicious server cannot spend anyone’s Bitcoin on its own. The fake transaction it plants carries invalid signatures, so the network would reject it. What the attacker needs is a valid signature from the Read Entire Article


English (US)