Electrum patched critical vulnerability exploited to redirect Bitcoin payments

Security researchers discovered a high-severity flaw in Electrum Bitcoin wallet that allowed malicious servers to redirect payments during fee adjustments. The vulnerability, patched in version 4.8.3, exploited the wallet's reliance on external servers to display manipulated transaction details. Attackers generated addresses matching the final four characters of legitimate recipients, deceiving users who checked partial addresses. At least one user lost funds after approving a fraudulent transaction. The exploit leveraged Bitcoin's Replace-by-Feature mechanism, requiring users to manually increase fees to trigger the attack.