Electrum patched a wallet flaw that let malicious servers replace a pending Bitcoin payment with a fake transaction sending funds to an attacker. At least two users reported attacks, including one confirmed loss.

  • Versions before 4.8.3 were vulnerable
  • The trap activated when users approved a higher fee to speed up payment
  • Attackers reportedly matched the recipient address’s final four characters; upgrade immediately

LaunchBar verdict: this was social engineering wrapped in wallet infrastructure, not a Bitcoin protocol breach or private-key theft. Update Electrum, verify the full destination address before fee bumps, and treat unfamiliar servers as toxic liquidity.