Electrum wallet vulnerable before version 4.8.3: what you can do now

Anyone keeping bitcoin in Electrum should check their wallet's version number today. Every release before 4.8.3 carries a flaw through which a malicious server can get you to sign a payment to an attacker. The developers closed it on October 23, 2026 and disclosed it a day later. Their security advisory contains the sentence that separates this case from a theoretical weakness: some servers are already carrying out this attack. The flaw is rated high in severity and carries no CVE number.