Electrum Says High-Risk Exploit Affected Versions Before 4.8.3

Electrum disclosed a high-risk vulnerability exploited by malicious servers to redirect bitcoin payments when users raised transaction fees, affecting versions released before 4.8.3. According to Odaily, Electrum received reports of two related incidents, including one in which a user lost funds.The attack could intercept a broadcast transaction and replace it in the wallet’s history with a fake transaction sending funds to an attacker-controlled address. When a user increased the fee through Replace-by-Fee (RBF), Electrum could sign the malicious transaction. Attackers also generated addresses with the same final four characters as the intended recipient’s address.Electrum said the vulnerability was fixed in version 4.8.3 and advised users to update and check recipient addresses and amounts before signing transactions.