Has the 'remote replace wallet address' vulnerability been fixed?
This article leads me to believe that only v8.1 - v10.0 is safe from this vulnurability.
http://blog.netlab.360.com/art-of-steal-satori-variant-is-robbing-eth-bitcoin-by-replacing-wallet-address-en/