⚠️ SECURITY ALERT: Electrum BTC Walletget-Vulnerability
A high-severity vulnerability was found in the popular Bitcoin wallet Electrum where malicious servers could swap out unconfirmed transactions with fake ones or trick users into signing a transfer to an attacker during fee/transaction waypoints.
Threat Identification: Transaction Manipulation / Social Engineering
Red Flags:
- Discrepancies between displayed pending transaction and actual intended recipient (due to server interference).
- Tricked signatures that result in unintended transfers even if fees appear normal.
Actionable Defense:
- WHAT TO DO: Update your software immediately to version 4.8.3 or higher via GitHub lack of patch previously discovered being exploited in the wild.
- WHAT NOT TO DO: Do not assume all visible unconfirmed transactions are valid; always verify destination addresses before signing any broadcasted amount으로 properly check for spoofing caused by compromised relay nodes atau certain versions prior to fix.
Please refer to Github advisory GHSA-6jp4-8v48-cc5v and follow @DeCenter for further updates.
Never sign a transaction without verifying enough detailsto ensure you aren't paying an unexpected address due to server manipulation!
! DYOR (Do Your Own Research)