TL;DR
- Security Flaw: Electrum disclosed a vulnerability that allowed malicious servers to replace pending transactions with fraudulent ones, exposing users to potential theft.
- Fee Bump Trap: Attackers exploited Bitcoin’s Replace-by-Fee feature, causing users who increased transaction fees to unknowingly authorize payments to attacker-controlled addresses.
- Fix Released: Electrum patched the issue in version 4.8.3 and advises users to upgrade immediately, verify addresses carefully, and rely on trusted servers.
A security flaw in the Electrum wallet allowed malicious servers to trick users into authorizing payments that ultimately sent funds to attackers. Developers confirmed that at least one user lost money after what appeared to be a routine attempt to speed up a pending transaction, prompting the release of an urgent software update.
How the Vulnerability Worked
The issue affected how Electrum handled unconfirmed Bitcoin transactions. Unlike a full Bitcoin node, Electrum depends on external servers to retrieve transaction history and broadcast payments. Before the security update, the wallet trusted those servers to report pending transactions without verifying their signatures. According to the disclosure, attackers controlling a malicious server could intercept a Bitcoin payment before it reached the network and replace it with a fraudulent transaction in the wallet history.
The fake transaction appeared to spend the user’s coins to an attacker-controlled address, even though it contained invalid signatures. Because the wallet failed to detect those invalid signatures, the fraudulent transfer appeared as a legitimate pending Bitcoin transaction. The attack became particularly dangerous when users attempted to speed up the payment process.
Replace-by-Fee Turned Into an Attack Vector
The exploit took advantage of Replace-by-Fee (RBF), a Bitcoin feature that allows unconfirmed transactions to be replaced with versions carrying higher fees. When a user chose to raise the fee on what appeared to be a stuck Bitcoin transaction, Electrum could take the previously injected fraudulent transaction and sign a valid replacement. As a result, the user’s Bitcoin could be redirected to an attacker-controlled address.
In one reported incident, the malicious transaction carried no fee, making it appear stalled and increasing the likelihood that a user would attempt a fee bump. Attackers also generated destination addresses with matching final four characters, making the altered Bitcoin payment more difficult to notice during a quick review.
Reports, Fix, and User Recommendations
The first report was submitted on Oct. 11 by a user operating a two-of-three multisignature Bitcoin wallet secured with two Trezor hardware devices. Although the user noticed a suspicious outgoing transaction, no financial loss was reported. A second user reported on Oct. 18 that they increased the fee on a substituted Bitcoin transaction and lost funds. Developers have not disclosed the amount stolen or identified the malicious servers involved.
Electrum responded by releasing version 4.8.3 on Oct. 24. The update adds signature verification checks for unconfirmed transactions that spend coins from the user’s wallet. Users running older versions remain vulnerable when connected to malicious servers. Developers recommend upgrading immediately and carefully verifying addresses and payment amounts before signing any Bitcoin transaction. Users connected only to trusted servers, including their own, were not affected.
