Electrum Patches Wallet Flaw That Let Malicious Servers Redirect Payments
The Electrum bitcoin wallet has been patched after a flaw was exploited through malicious servers, according to a report by The Defiant. The flaw could allow a rogue server to swap in a fake payment and push the user to sign it at a higher fee.
How the attack worked
According to the report, a malicious server could substitute a fake payment for the one the user intended. The user would then be tricked into signing that transaction while the fee was raised.
The Defiant reported that developers said one user had lost money as a result.
Open questions
- How many users were affected by the flaw?
- How much money was lost in the reported case?