In August-September, Bitcoin wallet Electrum was hacked twice, and according to multiple sources, at least 1,450 BTCs worth $11.6 million were stolen from phishing attacks that faked Electrum upgrade tips.

Bitcoin Wallet Electrum will support the Lightning network in the next release, and its Lightning nodes have been merged into electrum's main branch, according to Cointegraph. Electrum also confirmed that the wallet will be written in-house development Python.

Users of Bitcoin wallet Electrum are facing a phishing attack, according to the Devi Security Lab. Hackers broadcast messages to the Electrum client through a malicious server, prompting the user to update to v4.0.0, and if the user follows the prompt to install this "backdoor-carrying client", the private key is stolen and all digital assets are stolen. At the time of writing, at least 1,450 BTCs worth about $11.6 million had been stolen from phishing attacks that faked Electrum upgrade tips. DeViable Security Labs hereby suggests that versions of Electrum below 3.3.4 are vulnerable to such phishing attacks, and users using Electrum Wallet are requested to update to the latest version of Electrum 3.3.8 via the official website (electrum.org), which has not yet been officially released, and do not use the link in the prompt to avoid asset losses.

Chain News, the veteran Bitcoin desktop wallet client Electrum released a 4.0 beta version, adding several important updates, including support for the Lightning Network, nearly a year after electrum's last version, 3.3.8 (last July). In the 4.0 beta version, Electrum primarily added features such as PSBT (partially signed Bitcoin transactions), Lightning Network, watchtowers (暸 watchtowers), and Submarine swaps (subliminal switching).

But it is correct to assume that the light client is connected to a random Bitcoin node from the network. If the light client connects to the user's own Bitcoin node (via Neutrino or Electrum), that's fine. Bitcoin Core nodes can still be attacked, but the problem is less serious.

Insights from Lydia Torne and Sophie Sheldon of Simmons LLC.

Electrum is a popular software wallet that works by connecting to a dedicated server. These servers receive a hash of the Bitcoin address in the wallet and reply with transaction information. Electrum wallets are fast and have few resources, but by default, it connects to these servers and can easily monitor users. In addition to Electrum, some other software uses public Electrum servers. By 2019, it is a faster and better alternative to BIP37.

C: s.users.appData/Roaming/Electrum/wallets.

According to Bleeping Computer, the BTC wallet app Electrom accused a phishing product called Electrum Pro of stealing a user's seed key on May 9 on GitHub and registering a domain name called electrum without Electrum's permission. The Electrum team noted that there was a piece of code indicating that the counterfeit product might have taken the user's seed key and uploaded it to the electrum. Affected users should transfer funds from BTC URLs managed by Eletrum Pro.

As mentioned earlier, because electrum light wallets are different from Bitcoin light wallets such as MultiBit or Breadwallet, they cannot communicate directly with bitcoin full nodes and can only communicate with electrum.