Bitcoin Forum

https://twitter.com/ElectrumWallet/status/1280785286742540288

# Release 4.0.2 - (July 8, 2020)
 - rm old corrupted non-bip70 invoices (#6345)
 - other minor fixes

I expected that there would be a few bugs when the new 4.0 version came out so I decided to stick with the old and reliable 3.3.8 for the time being.
I am not planning to update yet. I prefer to sit back a little and see what happens. Unless a vulnerability is found with 3.3.8 I am not really in a hurry. I use Electrum together with a hardware wallet so...

Based on some other posts I read around the forum, seems that the new mobile apps have a few bugs here and there as well. Nothing out of the ordinary though.

There isn't any great difference between the two, so I agree, no need to hurry to update

However, now it offers Lightning support. If you want to use lighting you would have to update.

On my local board, my friend sharing about a mobile phone aplication have a bug where lightning network enable button disappear in wallet information.

I'm using v4.0.2 arm-v8-64bit and there's an "Enable LN" button below the wallet information (third button)...
It's just grayed out since my watch-only wallet is P2SH-SegWit.

It's not in those screenshots, he needs to tap the wallet name above (upper-left) to display the 'wallet information'.

Thank you, I found enable button, I am using electrum android downloaded from Playstore.

https://i.postimg.cc/yd1gXsH3/ln-1.jpg https://i.postimg.cc/TwsdL6Y6/ln-3.jpg https://i.postimg.cc/59kYvhkj/ln-2.jpg

Seems I can't backup, it say Backup directory not configured.

- How much minimum btc required to create channels?.

I am quite new to electrum and just downloaded their latest release. I am wondering what does the "pending" means after I requested an address that doesn't expire? also, is it ok to use the address while it is in pending will I be able to receive BTC from it? TIA!!!

image for reference
https://i.imgur.com/kmgdYpl.jpg

What you have created is a non-expiring "request"... it's like creating an invoice and sending it to a client...

If all you want is an "address" that someone can send funds to, then click that entry in the list, then click the "address" tab at the top-right of the "Receive" page:
https://talkimg.com/images/2023/11/15/zJKzg.png

NOTE: It is only pending, because has detected that no funds have been sent to that address yet, so the "request" has been filled ;) So you will be able to receive the funds sent to that address.


Alternatively, you can use "View - Show Addresses" and then click on the "Addresses" tab and select an address from that list.

The minimum for Electrum is 0.002BTC plus fee.

For the backup, you need to enable it first in the 'Menu->Settings->Backups: No -> Yes'.
Or you haven't granted Electrum a "file management/storage permission" yet.

Releasing a lot of updates in short times will be detrimental to beginners, even though the mistake is made of them not checking the message.
Can anyone tell us, do recent updates deserve a new version?

---

for those who want to use it with Arch and Ledger wallet you need btchip-python v1.3 (Install python-pip & "pip install btchip-python)
https://twitter.com/lb750123/status/1281174681228361734

If they don't check the messages they may be very well still on 3.3.8.
...Also the beginners can and should set in-wallet notify for new version.

Maybe because some of the updates are trivial for some android phone users.

The merged PR here that were 9days-old and earlier were the updates included in the latest version 4.0.2 (from v4.0.1):
https://github.com/spesmilo/electrum/pulls?q=is%3Apr+is%3Aclosed (https://github.com/spesmilo/electrum/pulls?q=is%3Apr+is%3Aclosed)
The first 6 in the list, specially the "back button" issue, which I didn't experienced.

Actually there have been vulnerabilities discovered in hardware wallets and Electrum 3.3.8. It's called Fee overpayment attack on multi-input segwit transactions.

Trezor firmware upgrade info: https://blog.trezor.io/details-of-firmware-updates-for-trezor-one-version-1-9-1-and-trezor-model-t-version-2-3-1-1eba8f60f2dd
Description of the attack on Optech Newsletter: https://bitcoinops.org/en/newsletters/2020/06/10/

I waited with Trezor firmware upgrade until Electrum 4.0.2 was released, now I have upgraded both, it works fine.

That has been patched by Ledger in one of their software updates a few weeks back. Besides, that attack was not exclusive to Ledger and Electrum's version 3.3.8. Plenty of other brands were affected. Some patched it already, others waited and did it in future updates. 

I assume you are talking about this:
https://support.ledger.com/hc/en-us/articles/360014191540-Massive-transaction-fees-in-BTC-and-BTC-based-apps

I replied to your post because you said "Unless a vulnerability is found with 3.3.8 I am not really in a hurry.", and I pointed out that vulnerability has indeed been found month earlier in electrum 3.3.8 (And other software as you mentioned, Ledger etc), so it's not safe to use 3.3.8.
And latest Electrum 4.0.3 has been released on 11 September and it restores compatibility for PSBT after this vulnerability previously discussed, it has it's own CVE now: http://cve.circl.lu/cve/CVE-2020-14199
So definitely it's recommended to stay with latest Electrum and latest Bitcoin Core at the moment.