Hacking News
Electrum Wallet Patched for Bitcoin Payment Redirect Vulnerability
Bitcoin wallet Electrum has patched a security flaw that allowed malicious servers to redirect Bitcoin payments when users manually increased transaction fees. The vulnerability, affecting versions earlier than 4.8.3, was exploited by attackers who generated Bitcoin addresses matching the final four characters of intended recipients' addresses. This deception led users to approve fraudulent transactions, resulting in at least one user losing funds. The exploit took advantage of Electrum's reliance on external servers to track unconfirmed transactions, allowing attackers to manipulate payment information displayed to users.