According to The Defiant, Electrum developers patched a wallet vulnerability that allows malicious servers to deceive users into signing fraudulent transactions. The flaw enables a server to present a fake payment request, which the user then signs under normal interaction flow. Concurrently, the server can increase the transaction fee associated with the request. Developers confirmed that at least one user reported losing money as a result of encountering this scenario.
