Electrum wallet vulnerability and Bitget hack outflows reported

The Electrum Bitcoin wallet has released version 4.8.3 to address a critical vulnerability that has already been exploited. The flaw targets the wallet's reliance on servers for unconfirmed transactions. Attackers use a malicious server to present a fake transaction to the user. If the user attempts to speed up their original, pending payment using the ‘Replace-by-Fee’ (RBF) method, they inadvertently sign a new transaction that sends funds to an attacker-controlled address. The malicious address often mimics the intended recipient's address by sharing the same last four characters.

In a separate security incident, blockchain analysis firm Arkham is tracking the movement of approximately $19.48 million linked to the Bitget hack. Between October 21 and October 24, 2026, the funds were moved through 52 separate transfers. The majority of the stolen assets, totaling $19.33 million, were converted into Bitcoin, with the remainder consisting of other assets such as Ethereum. The fragmented transfer pattern is a common tactic used to complicate the tracking and recovery of stolen cryptocurrency.