Electrum 4.8.3 plugs the malicious-server payment trap—upgrade time 🔐

Bitcoin wallet Electrum released version 4.8.3 on Oct. 24, urging all users to upgrade to fix a critical flaw that lets a malicious server trick them into signing payments to an attacker.

The project's security advisory lists all versions before 4.8.3 as affected and says some servers are already carrying out the attack.

Developers received two user reports, including one from a user who lost money after increasing a transaction's fee.

“This release fixes a critical security issue, so we urge all users to upgrade,” Electrum wrote in its release announcement.