PSA: Electrum has a critical security vulnerability

[MiningSensei]

Just update it through your wallet, there is a button to update it, otherwise, just download the proper version (the latest one) from the official page of Electrum, it is not difficult to do so.

What's the proper way to update? If I download and install the new version, is there any chance of losing my wallet files? Will the 3.0.4 version be able to read my wallet files, or will I need to import my seed?

What do you mean by "your notes"? You are not going to lose anything, and if you import through your seed, you are going to recover your whole balance at the moment, it is just like importing a private key.

I assume I'll lose all of my notes if I import from seed, right? That's sort of a bummer. I was using it to keep records of the transactions, but now I'm afraid to open my wallet.

Guys, do not use electrum anymore, if this happened before, it can really happen one more time.

[1714033170]

1714033170

[1714033170]

1714033170

[1714033170]

1714033170

[Davinus]

Electrum is a good wallet, but i do not know it has been having a lot of vulnerabilities during the last few days, and honestly, there are too many malwares at the moment, i dont know why everybody, or almost all the hackers are sick for stealing other people's money.
This really needs to end.

[teddy5145]

Electrum is a good wallet, but i do not know it has been having a lot of vulnerabilities during the last few days, and honestly, there are too many malwares at the moment, i dont know why everybody, or almost all the hackers are sick for stealing other people's money.
This really needs to end.

Actually, this vulnerability has been there for past few years, since electrum 2.9-ish if I'm not wrong.
It just that at the time there were no known exploit that uses this vulnerability, until a guy from google showed how to use this vulnerability to steal your seed.
Every software has its bugs, just update your electrum to the newest version or change your wallet completely if you think electrum are not safe anymore

[DarkStar_]

I assume I'll lose all of my notes if I import from seed, right? That's sort of a bummer. I was using it to keep records of the transactions, but now I'm afraid to open my wallet.

Guys, do not use electrum anymore, if this happened before, it can really happen one more time.

Every wallet can have bugs, including Bitcoin Core and hardware ones. This vulnerability only really affects you if you didn't set a passphrase, which is something everyone should be doing anyway for some basic protection. If you want really good protection, you shouldn't be using Electrum on an online computer anyway. The issue was also fixed a few hours after it was found, which (imo) shows that Electrum is a good wallet to use. What's the wallet you suggest?

Even if we have to upgrade to 3.0.4 version already it is important to upgrade 3.0.5 because the old version even 3.0.4 maybe attacked by the attackers.But in my knowledge it is better to move all our bitcoins into other bitcoin wallet like blockchain wallet or to hardware wallets to keep our coins secured.

Great spam post. Blockchain.info's wallet is even less secure. Blockchain.info could feed you malicious javascript and compromise your keys, they've had a few bugs with things like address generation that has caused a loss of funds, and people can attempt to bruteforce into your wallet.