DECRYPT · 2026-10-26 17:41 UTC

Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers

Electrum Bitcoin wallet patched a critical vulnerability (versions before 4.8.3) that allowed rogue servers to redirect user funds to attacker addresses by manipulating unconfirmed transactions. The exploit works by injecting fake conflicting transactions that appear legitimate, then tricking users into fee-bumping them, causing their actual payment to go to the attacker instead. At least one confirmed loss reported on October 18; a 2020 Electrum attack campaign previously drained an estimated $25 million from users.

Loading the story on Tree News…