what you did was correct. addresses should not be reused and you should use a different address per transaction. all your coins are in the same wallet and moving them to a single address will only cost you tx fees and not bring any benefit.

Did you update in response to messages in the app itself? Can you check your browser history for the exact URL you downloaded electrum from and share that with us?

On the addresses tab do you see any familiar addresses? View menu > show addresses to bring that tab into view.

what software, including name and version number, was used to create the seed originally?

try the things listed here

They want to regulate cryptocurrencies because its proving to be outside their control and because richer countries are accepting the tech. It's wishful thinking on their part that they'll be able to regulate it.

Here's a guide to using the label sync plugin. Also see how to properly backup your wallet.

It's a case of damned if you do and damned if you don't! People who lost money to the scam were cursing the developers and threatening to sue them so they had to do something. Now people are complaining that they have to update electrum!

Note that it's not just the phishing bug. The DoS bug they are exploiting is also there and there's a wallet file corruption bug that was fixed recently as well.

idk. you can ask them on irc.

i know auto updates were rejected by bitcoin core because in the event of a compromise of their servers every user could become infected with malware.

Animazing was a developer who contributed to electrum in the past. He used to sign the windows releases.

Here's a guide to verifying the sig with kleo.

Don't copy paste the signature or the public keys. Instead use your browser's save file function.

Yes if the first server they connect to is a bad one or an unpatched good one their clients will not crash. Also if they are using versions 3.3 - 3.3.2 they will still see the phishing messages if they are connected to a bad server and attempt to spend their bitcoins. However, with  version 3.3.2 the message is not rendered in rich text.

Once legit servers deploy this it'll greatly reduce the room attackers have to operate.

See here: https://github.com/spesmilo/electrum/issues/5193#issue-420161782 .

old versions are unsafe so they are deploying this "fix" on good electrum servers. it means if you run an old version and happen to connect to a good server electrum will crash forcing you to seek help. when you do we will tell you to upgrade. so that's what you should do it's for your own good!

edit: the upgrade is not automatic. you have to download and install the latest version from electrum.org.

It'll take time for good servers to roll out this new code. Once they do the scammers will have only one avenue left - they have to get you to connect to their server first!

you can switch servers

Run electrum using the terminal with the -v switch, paste what it outputs on pastebin.com and share the link here.

Use the appimage version instead. See the instructions for linux here.

So it is a little different Then there's the derivation path which varies based on script type and there is the process of generating new addresses based on which addresses have already been used. All in all it's a lot easier for a lay person if they simply archive the software or better yet understand that electrum isn't going to just disappear and their fears are ungrounded.

This is not true. Electrum does not abide by bip39 which is the standard other wallets support

@ tezza123 You will need the algorithm contained in the electrum source code to convert your seed to the individual address private keys. Backing up the private keys is not safe since electrum creates new ones as you use old addresses. You would have to keep backing up private keys each time you spent bitcoin. It would defeat the entire purpose of using a deterministic wallet.

If you're worried about electrum disappearing I suggest you archive a copy of the software as well.

Core addresses are not multisig by default. Those are p2sh segwit addresses. When importing in electrum you have to prepend p2wpkh-p2sh: to the private key. For example:


To dump all the private keys use the dumpwallet command in core debug console. dumpwallet </path/to/somefile> . open that file in a text editor to see the priv keys.

Yeah sorry I didn't mention that the site had to be loaded first. Kinda forgot