Electrum patches flaw that let rogue servers redirect fee-bumped payments
Electrum released version 4.8.3 to fix a high-severity flaw affecting all earlier versions, Decrypt reported. A compromised server could hide a pending payment and inject a fake conflicting transaction so that a user's fee bump paid an attacker; the developer advisory said some servers were running the attack in the wild, with one user reporting a confirmed loss.
Only one publisher so far. Another independent outlet or an official source would raise it.
Security topic · core coin BTC
Fresh security news
Key facts
Attributed sources: Decrypt
BTC after this site detected it
- 5 minutes-0.12%Gate · USDT
- 1 hour-0.13%Gate · USDT
- 24 hours—Window not complete
Claims and open questions
What sources claim
- Decrypt reported that the flaw affects all Electrum versions before 4.8.3, which verifies cryptographic signatures on wallet-owned inputs before adding unconfirmed transactions to local history.
- Electrum developer SomberNight's advisory states that some servers are performing this attack in the wild, backed by two user reports, including a confirmed loss reported by a user identified as Raju-K12 after a fee bump on October 18.
- Decrypt reported that the fix was tagged in the repository on October 23 and binaries were published the following day, while incoming transactions from external senders are still accepted without signature verification.
Still unresolved
- How much was lost in the confirmed case reported by Raju-K12? An on-chain transaction record or an updated developer advisory would establish the amount.
- When will signature verification be extended to incoming transactions from external senders? An official Electrum advisory or release note would confirm the timeline.
Source evidence
decrypt.co
Published 26/10/2026, 17:41 · Received 26/10/2026, 17:45
Market reaction after detection
Measured from the sample nearest site detection, on the same source and quote currency.
| Window | Return | Actual sampled interval / source |
|---|---|---|
| 5 minutes | -0.12% | 26/10/2026, 17:45 → 26/10/2026, 17:50 (UTC) Gate · USDT |
| 1 hour | -0.13% | 26/10/2026, 17:45 → 26/10/2026, 18:45 (UTC) Gate · USDT |
Historical market context
Closed hourly candles from the 30 days before this event observation. Different venues are kept separate. Research: hourly returns and BTC beta →
| Metric | Value |
|---|---|
| Hourly coverage | 100.0% (720/720) |
| Median absolute 1h return | 0.14% |
| 99th percentile of absolute 1h returns | 1.01% |
OKX · USDT · Context as of 26/10/2026, 17:45 · Last included candle closed 26/10/2026, 17:00
Event timeline
Source publication, receipt and analysis times are separate. All times UTC.
Source published: Decrypt
Source received: Decrypt
Event first detected by this site
English explanation generated
Evidence levels describe source coverage, not the probability that a report is true. Price moves and their timing cannot establish a cause; minute samples show an observed interval and alert thresholds are heuristics. Explanations are model-assisted, with citations and figures checked. Source titles stay in their original language; full articles are not republished. Methods and limitations →
Recent BTC events and market reactions
- South Korea weighs fourth delay of 22% crypto tax to 2029 [Published 26/10/2026, 14:06 (UTC) · Single source (1 publisher) · General news · 5m +0.31% / 1h +0.98%]
- Strategy pauses bitcoin purchases, spends $204.9 million buying back STRC [Published 26/10/2026, 13:23 (UTC) · Multiple publishers (4 publishers) · General news · 5m -0.24% / 1h -0.03%]
- Bitcoin Magazine video examines Bitcoin exposure after PHP flaws take sites offline [Published 26/10/2026, 13:21 (UTC) · Single source (1 publisher) · Security · 5m -0.30% / 1h +0.12%]
- Bitcoin slips below $80,000 as tech sell-off and ETF outflows weigh ahead of Fed [Published 26/10/2026, 13:02 (UTC) · Multiple publishers (2 publishers) · Market watch · 5m -0.07% / 1h -0.72%]
- Galaxy Research says bitcoin's bear market ended at the June low [Published 26/10/2026, 13:01 (UTC) · Multiple publishers (3 publishers) · Market watch · 5m -0.09% / 1h -0.72%]
Get the next BTC event with its sources: Follow BTC by RSS →