Electrum 4.8.3 patch stops server-based transaction swap flaw

Community Trust Score Verified 95 % Real Verified 19 votes Updated 8 minutes ago Electrum developers published a security advisory on Saturday detailing a vulnerability that allowed malicious servers to insert fake pending payments into user transaction histories, a flaw that led to at least one confirmed loss of funds. The wallet, one of Bitcoin’s oldest software clients, released version 4.8.3 on October 24 to address the issue. The update adds signature checks for unconfirmed transactions that spend coins from the user’s own wallet, closing the gap that allowed attackers to manipulate transaction data before confirmation.