It mostly affects wallets that are not password protected.
[url=http://insidebitcoins.com/news/electrum-wallet-keys-could-be-snatched-by-malicious-websites/95832]http://insidebitcoins.com/news/electrum-...ites/95832
Reddit thread: https://www.reddit.com/r/Bitcoin/comment...erability/
Quote:[/url]
Quote:Quote:
Developers of the Electrum bitcoin wallet have rushed out a security update today, to fix a vulnerability that would have allowed malicious websites to scan and discover users’ private keys. Only non-password protected wallets were exposed to risk of theft from the flaw, which was first reported a few months ago.
Anyone running Electrum is advised to shut down the application immediately and update to version 3.0.4, though Bitcointalk administrator Theymos advised against rushing to upgrade immediately, to “make sure everything is settled”.
The issue also affected Electrum derivative software such as the Electron Cash wallet for Bitcoin Cash and a version for Litecoin. however developer Jonald Fyookball posted on Github shortly after the patch release that Electron Cash had been updated as well.
[url=http://insidebitcoins.com/news/electrum-wallet-keys-could-be-snatched-by-malicious-websites/95832]http://insidebitcoins.com/news/electrum-...ites/95832
Reddit thread: https://www.reddit.com/r/Bitcoin/comment...erability/
Roosh
http://www.rooshv.com