High-risk vulnerability exploited, Electrum discloses versions before 4.8.3 affected

Odaily reports: According to Bitcoin News monitoring, Electrum has disclosed a high-risk security vulnerability in which malicious servers can trick users into sending Bitcoin to an attacker's address when users increase transaction fees. The attacker intercepts broadcast transactions and replaces them in the wallet history with a forged transaction that redirects funds to an address controlled by the attacker. If users increase fees via Replace-by-Fee (RBF), Electrum may sign the malicious transaction. Electrum confirmed receiving two related incident reports, with one user losing funds. The attacker also generated addresses with the same last four characters as the intended recipient addresses. The vulnerability affects versions prior to 4.8.3 and has been fixed in version 4.8.3. Electrum reminds users to update immediately and to verify all recipient addresses and amounts before signing transactions.