Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments
Attackers replaced legitimate transactions with fake ones, then waited for users to approve higher fees. At least one person lost bitcoin before developers patched the flaw.
A security flaw in the popular bitcoin wallet Electrum allowed malicious servers to steal funds from users who attempted to speed up transactions. The vulnerability, disclosed by Electrum on Saturday, was exploited by servers that Electrum relies on to retrieve transaction histories and broadcast payments. Developers confirmed at least one case where money was stolen due to the bug.
Electrum's developers recommended users to upgrade to version 4.8.3 and check receiving addresses and amounts before signing payments to avoid falling victim to the attack.
Brief written by urgent.news from CoinDesk's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
