COINDESK · 2026-10-26 05:15 UTC

Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments

Electrum bitcoin wallet had a security flaw allowing malicious servers to trick users into signing fraudulent payments when attempting to speed up transactions via Replace-by-Fee. Developers confirmed at least one case of funds theft in October; attackers replaced legitimate transactions with fake ones spending coins to attacker-controlled addresses. Electrum released patched version 4.8.3 on October 24 adding signature validation for unconfirmed transactions; earlier versions remain vulnerable when connected to malicious servers.

Loading the story on Tree News…