The Electrum Wallet is not safe at the moment!

Earlier today was spread out the news that a big vulnerability in the Electrum Wallet was found. Apparently the exploitable bug was present in the code for a while and this set off the alarms for all users and community. The Electrum Wallet is a very popular Bitcoin client, and it seems that if you were running it and the chance of any website open at the same time, and you weren't careful enough to set a password for the wallet you might be in serious danger. 

What to do now?

1. Shut it down asap!

2. Update your Electrum Wallet to the latest version, Upgrade to 3.0.4.

3. If you haven't already, set a password phrase for it. 

This is the official announcement made by the company:

Critical Electrum vulnerability

A vulnerability was found in the Electrum wallet software which potentially allows random websites to steal your wallet via JavaScript. The bug presumably also affects altcoin derivatives of Electrum such as Electron Cash. If you don't use Electrum or a derivative, then you are not affected and you can ignore this.

Even though we still not sure the reach of this security breach you can low your paranoia levels if you had set a password for your Electrum Wallet previously this announcement. 

If you had no wallet password set, then theft is trivial. If you had a somewhat-decent wallet password set, then it seems that an attacker could "only" get address/transaction info from your wallet and change your Electrum settings, the latter of which seems to me to have a high chance of being exploitable further. So if you had a wallet password set, you can reduce your panic by a few notches, but you should still treat this very seriously.

Stay safe.