Electrum Wallet Bug Tricks Users Into Signing Over Payments
Electrum wallet bug lets cybercriminals trick users into signing over payments.
In brief
Electrum wallet bug lets cybercriminals trick users into signing over payments. Electrum wallet vulnerability allows attackers to swap payments with fake transactions before confirmation. Originally reported by Pymnts.
Electrum wallet vulnerability
A flaw in bitcoin software wallet Electrum reportedly allowed cybercriminals to dupe users into signing over payments.
Attack method
Attackers controlled servers to capture payments before they reached the bitcoin network and swap them with fake transactions.
Replace-by-fee exploit
Users choosing Replace-by-Fee could approve fraudulent transactions and send funds to attackers.
Electrum fix
Electrum issued an update with signature checks for unconfirmed transactions using customer coins.
Recent similar incidents
Ledger investigated a $90 million hack from its devices earlier this month.
What it means
Electrum wallet vulnerability allows attackers to swap payments with fake transactions before confirmation.
