Threat Pulse 62High
Electrum: malicious servers can trick users into paying attackers on fee bump
Severity 6PatchedconfirmedCrypto

A malicious Electrum server can hide a just-sent transaction and show a fake one that pays the attacker; if the user bumps the fee (RBF), the wallet signs it. One confirmed loss. Fixed in Electrum 4.8.3. No CVE.

What to do: Update to Electrum 4.8.3, or connect only to a server you run or trust.

· 11 days ago · one confirmed loss · github.com
Sourcesgithub.com
On X
@ElectrumWalletverifiedOct 24, 15:32 UTC

Vulnerability disclosure (vendor thread linking the advisory)

Open on X
Why this score

Plan rubric with caps (verified sweep, Oct 25): needs a malicious server plus a user fee bump, one loss reported

Back to the board

Updated Nov 5, 01:45 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.