Bitcoin Future： electrum refund address

Comment: After a malicious attack on the transaction's sending address last week, the original address holder implored F2Pool to refund the transaction's fees to recover some of the losses. After confirming that the transaction was packaged by the mine pool PPS settlement method node, F2Pool decided to refund the handling fee and return it to the verified new address on June 18.

Electrum client. A veteran security research expert told Hard Fork that if a user installs the problem version of Electrum.

At the time of writing, at least 1,450 BTCs worth about $11.6 million had been stolen from phishing attacks that faked Electrum upgrade tips. DeViable Security Labs hereby suggests that versions of Electrum below 3.3.4 are vulnerable to such phishing attacks, and users using Electrum Wallet are requested to update to the latest version of Electrum 3.3.8 via the official website (electrum.org), which has not yet been officially released, and do not use the link in the prompt to avoid asset losses.

According to Reddit user u/normal_rc, electrum's wallet was hacked and nearly 250 bitcoins (243.6 BTCs, nearly $1 million) were maliciously stolen, according to coinelegraph. Electrum then confirmed that the attack included creating a fake version of the wallet to trick users into providing password information. Electrum responded on Twitter that "this is a persistent phishing attack on Electrum users" and warned users not to download Electrum from any source other than the official website.

UBTC Electrum Light Wallet v3.3.4 Latest Release (note attached)

Note: Electrum-XZC is derived from Electrum and uses different seed phrase criteria, so it cannot be imported.

In this demo, Electrum developer Chris Belcher shows how to set up and use an Electrum personal server.

You can use Security Seeds to recover your wallet on any Electrum client, even on the Electrum Wallet online web program.

Digital wallet developer Electrum has released an emergency patch saying it found a vulnerability that could lead any website hosting Electrum to steal a user's digital currency, exposing passwords to the JOHNSONRPC interface and ingelling hackers full control of the wallet. Earlier, Electrum released the first patch, but it didn't seem to solve the problem, and they released a second update urgently Sunday night local time.

Mainstream popularization can only be achieved if disruptive technologies interact reasonably with existing traditions.

According to the monitoring of the blockchain security company PeckShield, following the intensive money laundering of 7,074 BTC stolen from Binance yesterday, one of which contained 1,060 BTC addresses starting with bc1q2rdpy, at 16:54 this afternoon, another deposit The address at the beginning of 1,060 BTC 16SMGihY9 also changed. The hacker frequently operated hundreds of transactions in a continuous cutting and decentralized manner until the minimum amount on the new address was only 0.78 BTC. Up to now, Binance has stolen 7,074 BTC after the 7 main addresses are dispersed, 2 of which have started intensive money laundering, and most of the small addresses may be successfully laundered.

This update prompt is not an official act of Electrum, but a phishing attack by an attacker that exploits a message flaw on the Electrum client and the ElectrumX server, which requires the attacker to deploy the malicious ElectrumX server in advance, and the malicious server is localized by the user's Electrum client (because the Electrum client is a light wallet and the user needs the ElectrumX server to broadcast the transaction). At the time of the madness, malicious ElectrumX servers accounted for as many as 71% of the total, and according to incomplete statistics, hundreds of bitcoins have been stolen in this phishing attack over the past year or so.

According to Bleeping Computer, the BTC wallet app Electrom accused a phishing product called Electrum Pro of stealing a user's seed key on May 9 on GitHub and registering a domain name called electrum without Electrum's permission. The Electrum team noted that there was a piece of code indicating that the counterfeit product might have taken the user's seed key and uploaded it to the electrum. Affected users should transfer funds from BTC URLs managed by Eletrum Pro.

A botnet with more than 140,000 machines has launched a DoS attack on the server of Bitcoin wallet Electrum in an attempt to direct users to software versions designed to steal Bitcoin. Electrum users have been advised to take extra care when using the platform until the issue is resolved. Security researchers familiar with the matter say that if a user installs a fake version of Electrum, all funds contained in the old version will be lost immediately. (TNW)

In addition, small partners who have used Electrum wallets should be aware that with Thecret phrase generated by Electrum, we can recover bitcoin keys on any browser using the Bitcoin Wallet web tool. And Electrum is so secure that there is no evidence that the distributed attack prevention system designed by Dark Wallet will be due to Electrum.