Four Matching Characters Help Conceal the Attack
The trick became dangerous when users attempted to increase transaction fees through Replace-By-Fee (RBF). Rather than increasing the fee on their original payment, victims could inadvertently sign the substituted transaction, authorizing the transfer of their own bitcoin to the attacker.
The deception went further. Attackers generated receiving addresses whose final four characters matched the intended destination, making a quick address comparison less likely to expose the switch. One fraudulent transaction even carried a zero fee, apparently encouraging its victim to initiate the very fee adjustment needed to complete the theft.
Developers received two private reports. On Oct. 11, user dannydeezy reported transaction substitution, although the fee-bump mechanism wasn’t fully understood. On Oct. 18, Raju-K12 reported losing funds after approving a fee increase. The second report established that the attack wasn’t merely theoretical.
Electrum 4.8.3 Blocks the Transaction Substitution
The patch, introduced through commit 90fe308, requires Electrum to verify signatures for unconfirmed transactions spending coins belonging to the wallet. Fraudulent transactions with invalid signatures are rejected before entering the wallet’s local history. Users running versions earlier than 4.8.3 should download the update exclusively from electrum.org and verify its cryptographic signatures.
Until upgrading, users should carefully inspect every destination address and payment amount before signing, including during fee adjustments. Those connecting exclusively to trusted, self-hosted Electrum servers aren’t exposed to this particular server-based attack.
The incident exposes a curious contradiction: A wallet designed to protect private keys could still be manipulated into requesting a perfectly valid signature for a payment its owner never intended to make.
Leave a Reply