Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers
What Decrypt reports, why it matters and what remains unconfirmed.

The story in one view
- Reported by
- Decrypt
- Coverage lens
- Security and resilience
- Published
- Evidence status
- Cross-source reports linked
What Decrypt reports
A confirmed exploit let rogue servers replace Electrum’s pending transactions, tricking users into redirecting Bitcoin to attacker addresses.
The immediate significance
The report describes direct security exposure for users, funds or software. The immediate significance is the potential harm; the confirmed scale and any protective action require technical or primary evidence beyond the publisher summary.
CoinDesk has also published a related report, providing another attributed account to compare without treating repetition as proof.
What remains unknown
- The publisher summary does not contain the complete victim, transaction or technical evidence.
- The report does not establish the final loss or exposure, or whether remediation is complete.
- No matched primary document independently supporting the central claim is linked to this page.
The named assets, right now
Spot quotes from Kraken, checked .
How the story developed
CoinDesk and Decrypt are reporting related developments. Reports are shown in publication order; separate coverage is not independent confirmation.
CoinDesk Bitcoin wallet bug let rogue servers steal funds when users tried to speed up payments
Attackers replaced legitimate transactions with fake ones, then waited for users to approve higher fees. At least one person lost bitcoin before developers patched the flaw.
DecryptCurrent briefing Bitcoin Wallet Fixes Critical Flaw That Redirected Funds to Attackers
A confirmed exploit let rogue servers replace Electrum’s pending transactions, tricking users into redirecting Bitcoin to attacker addresses.
CoinDesk Ethereum fixes Glamsterdam bug that could have sent staking deposits to builders
Developers initially rejected the change before reversing course, as testing delays gave them more time to examine a flaw in Ethereum's upcoming Glamsterdam upgrade.
Related Articles And Podcast
Further reporting and analysis on this story.
How the $89M Cold Wallet Hack Reconstructed Bitcoin Seed Phrases
Listen to How the $89M Cold Wallet Hack Reconstructed Bitcoin Seed Phrases, an official Crypto News Today podcast episode.
Read the notes and play the episode