Hacking News
Electrum Wallet Flaw Allows Hackers to Steal Coins
Electrum, a popular Bitcoin wallet, published a security advisory on October 11th, describing a vulnerability that attackers were already abusing. The weakness involves a bug in the wallet that allowed malicious servers to trick users into paying hackers. Users who tried to approve what appeared to be a normal fee increase lost their funds. The issue stems from Electrum’s reliance on external servers to handle transaction histories and payments, which can be manipulated by attackers. The attackers could inject fake transactions into the wallet’s history, making users believe their coins were stuck and prompting them to approve a higher-fee replacement, leading to the theft of their funds.