Bitcoin wallet service Company Electrum has been hacked, resulting in the loss of user funds. In response to the attack, Beosin Chengdu Chain Security made an analysis: This wallet Electrum was attacked, mainly because the use of the kivy framework is using a standard py compiler and wallet does not do anti-secondary packaging protection, the core file can be directly recompiled back to the py file. Attackers can imitate the code, directly join the code to steal the user's password, key after the secondary packaging, and then cooperate with other attacks, tempt users to install the wallet implanted with malicious code, thereby stealing the user's password, key and other sensitive information.