Security Update Released for Electrum Wallet
Following the recent Meltdown/Spectre CPU attacks, a possibly critical vulnerability on the Electrum Wallet software has come to light. It would appear that this vulnerability was first introduced in 2015 with version 2.6 and could allow malicious code from websites to potentially gain access and steal funds from Electrum Wallets.
According to Electrum's twitter account, a security update has been released and users of Electrum wallets are advised to upgrade to the latest version (Electrum 3.0.4). Users who had been using Electrum wallets without setting a password are particularly at risk. However, users who have password-protected their Electrum wallets could also have their settings changed by malicious code and expose the wallets to future exploits.
New release: Electrum 3.0.4. Please upgrade, this is a security update. It fixes a vulnerability that was reported earlier today. See the release notes for details. https://t.co/Y2DXoUyOgkhttps://t.co/HlynSNK8dx
-- Electrum (@ElectrumWallet) January 7, 2018
Sources:
https://twitter.com/ElectrumWallet/status/949795637792518144
https://bitcointalk.org/index.php?topic=2702103.0