Electrum discloses a high-risk vulnerability; malicious servers tricked users into transferring funds, resulting in financial losses.

Electrum disclosed a high-risk vulnerability prior to version 4.8.3. A malicious server could trick users into sending Bitcoin to an attacker's address when they used the RBF feature to increase transaction fees. The attacker intercepted the transaction and replaced it with a forged one, generating an address with the last four digits identical to the intended recipient address. Electrum has received two incident reports, with one user losing funds. This vulnerability has been fixed in version 4.8.3, and Electrum recommends users update immediately and verify their transaction information. (Source: Bitcoin News)