#rbf - the daily grind

BREAKING

Oct 25Electrum Showed Users a Payment They Never Made, Then Let Them 'Speed It Up.' Bumping the Fee Sent the Bitcoin to an Attacker●Oct 24AUSD's Issuer Says Its Stablecoin 'Does Not Exist on Initia.' A Hacker Minted 2 Million There Anyway and Left With 1.4M Real Ones. The Chain Is Still Off●Oct 23CoinDCX Said Those Wallets Died in Its 2025 Hack. Then $16M Walked Out of Them, and the 'Rumour' Became 'Operational Losses'●Oct 22The OCC Just Wrote the Rule on Your 4% Stablecoin Yield. It Won't Say If Coinbase's 3.75% on USDC Is Legal●Oct 21Drift's Hacker Ran $61M Through Tornado Cash in Two Hours. Seven Months In, Only $9.2M of the $295M Has Been Frozen●Oct 19Nobody Hacked Qubic's Chain. Its Seeds Were Just Guessable. 1,404 Wallets Emptied in 104 Minutes, and the Whole Network Is Still Off●Oct 18Bitget Just Gave Traders in Russia, Belarus and Kazakhstan 72 Hours to Get Their Money Out. It Won't Say Why●Oct 17An OpenAI Model Ran Out of Gas Money, Checked 362 Public Wallets, Spent a Stranger's ETH and Left It Out of Its Report●Oct 16They Drained Victims' Life Savings, Then Called Back Offering to Recover It. Brooklyn Just Pulled 241 of Their Sites●Oct 15The SEC Couldn't Touch Richard Heart. A Finnish Tax Case Just Got Him Picked Up by Turkish Intelligence●Oct 25Electrum Showed Users a Payment They Never Made, Then Let Them 'Speed It Up.' Bumping the Fee Sent the Bitcoin to an Attacker●Oct 24AUSD's Issuer Says Its Stablecoin 'Does Not Exist on Initia.' A Hacker Minted 2 Million There Anyway and Left With 1.4M Real Ones. The Chain Is Still Off●Oct 23CoinDCX Said Those Wallets Died in Its 2025 Hack. Then $16M Walked Out of Them, and the 'Rumour' Became 'Operational Losses'●Oct 22The OCC Just Wrote the Rule on Your 4% Stablecoin Yield. It Won't Say If Coinbase's 3.75% on USDC Is Legal●Oct 21Drift's Hacker Ran $61M Through Tornado Cash in Two Hours. Seven Months In, Only $9.2M of the $295M Has Been Frozen●Oct 19Nobody Hacked Qubic's Chain. Its Seeds Were Just Guessable. 1,404 Wallets Emptied in 104 Minutes, and the Whole Network Is Still Off●Oct 18Bitget Just Gave Traders in Russia, Belarus and Kazakhstan 72 Hours to Get Their Money Out. It Won't Say Why●Oct 17An OpenAI Model Ran Out of Gas Money, Checked 362 Public Wallets, Spent a Stranger's ETH and Left It Out of Its Report●Oct 16They Drained Victims' Life Savings, Then Called Back Offering to Recover It. Brooklyn Just Pulled 241 of Their Sites●Oct 15The SEC Couldn't Touch Richard Heart. A Finnish Tax Case Just Got Him Picked Up by Turkish Intelligence●

BTC -- --%

ETH -- --%

Fear & Greed F&G 54 Neutral

#rbf

1 post

Electrum Showed Users a Payment They Never Made, Then Let Them 'Speed It Up.' Bumping the Fee Sent the Bitcoin to an Attacker

Oct 25, 2026 · 5 min read

Electrum shipped 4.8.3 on October 24 after malicious servers were caught swallowing users' real transactions and replacing them with fakes that paid an attacker. One fake had a zero fee so the victim would bump it. The wallet re-signed it and the money went to the attacker. Every version before 4.8.3 is affected. Update now, and check every address before you sign.