🎉 Electrum Wallet🇩🇪 updates its software after a bug allowed some servers to show users a fake “pending” transaction

🎉 Electrum Wallet🇩🇪 updates its software after a bug allowed some servers to show users a fake “pending” transaction

The vulnerability has been fixed, addressing a security flaw that put funds held in users’ bitcoin wallets at risk.

👍 The vulnerability stemmed from the fact that, unlike a full node, Electrum retrieves transaction history and broadcasts payments through external servers. Before the fix, the wallet trusted these servers’ data about “pending” transactions but did not verify their signatures. As a result, a server could replace a transaction in the history with a fake one.

👍 Here’s how the flaw worked: when a user attempted to speed up a transaction using Replace-by-Fee, they could end up signing a transfer to someone else’s address. The company itself disclosed the bug on October 24.

👍 Electrum has released an update that introduces signature verification for unconfirmed transactions involving coins from the user’s own wallet. The software is available for download from Electrum’s official website: see version 4.8.3.

👍 Older versions remain vulnerable when connected to malicious servers. Developers recommend updating the software and checking recipient addresses and transaction amounts separately before signing a transaction.

#news #crypto #scam #Europe

🤝 Argentina - issuance - instant acceptance and payouts in the same second starting at 2.5%