{
 "schema_version": "1.0",
 "generated_at": "2026-11-07T18:30:10Z",
 "last_checked": "2026-11-07T17:33:08+00:00",
 "agent_rules": [
  "Use only read-only checks (the commands marked read_only, or the app's own About menu). Never run anything that changes the computer.",
  "Never install, update, uninstall or change settings without the user's clear OK for that exact step.",
  "Only give the user the official links in this feed (official_patch_links and sources). Never send them to a download from anywhere else.",
  "If you cannot tell whether the user is affected, say so plainly instead of guessing.",
  "Say 'unconfirmed' when an incident's confidence is 'unconfirmed'."
 ],
 "product": {
  "slug": "electrum",
  "name": "Electrum",
  "short_name": "Electrum",
  "page_url": "https://patchgap.ai/is-my-electrum-up-to-date/",
  "minimum_safe_version": "4.8.3",
  "minimum_safe_version_source": [
   {
    "url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
    "title": "Electrum security advisory GHSA-6jp4-8v48-cc5v",
    "date": "2026-10-24",
    "kind": "ghsa"
   },
   {
    "url": "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES",
    "title": "Electrum release notes for 4.8.3 (Oct 23, 2026)",
    "date": "2026-10-23",
    "kind": "vendor"
   }
  ],
  "baseline": {
   "version": "4.8.3",
   "applies_to": "all platforms listed for this product",
   "source_incident": "electrum-wallet-fake-server-fee-bump-theft",
   "sources": [
    {
     "url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
     "title": "Electrum security advisory GHSA-6jp4-8v48-cc5v",
     "date": "2026-10-24",
     "kind": "ghsa"
    },
    {
     "url": "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES",
     "title": "Electrum release notes for 4.8.3 (Oct 23, 2026)",
     "date": "2026-10-23",
     "kind": "vendor"
    }
   ],
   "covers_everything_listed": true,
   "caveats": [],
   "text": "You're covered against everything listed here if you're on Electrum 4.8.3 or newer."
  },
  "update_steps": {
   "windows": [
    "Download the newest version only from electrum.org.",
    "Check the signature as electrum.org explains, then install it."
   ],
   "macos": [
    "Download the newest version only from electrum.org.",
    "Check the signature as electrum.org explains, then install it."
   ],
   "linux": [
    "Download the newest version only from electrum.org.",
    "Check the signature as electrum.org explains, then install it."
   ]
  },
  "last_checked": "2026-11-07T17:33:08+00:00",
  "vendor": "Electrum",
  "category": "wallets",
  "platforms": [
   "windows",
   "macos",
   "linux"
  ],
  "what_it_is": "A desktop wallet for Bitcoin.",
  "url": "https://patchgap.ai/is-my-electrum-up-to-date/",
  "json_url": "https://patchgap.ai/products/electrum.json",
  "official_site": "https://electrum.org",
  "official_download": "https://electrum.org/#download",
  "how_it_updates": "Electrum does not update itself. Download the new version from electrum.org and check its signature as the site explains.",
  "check": {
   "windows": {
    "menu_path": "Open Electrum. Click Help > About Electrum.",
    "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Electrum*' | Select-Object DisplayName,DisplayVersion",
    "shell": "PowerShell",
    "read_only": true
   },
   "macos": {
    "menu_path": "Open Electrum. Click Help > About Electrum.",
    "command": "defaults read \"/Applications/Electrum.app/Contents/Info\" CFBundleShortVersionString",
    "shell": "Terminal",
    "read_only": true
   },
   "linux": {
    "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
    "command": null,
    "shell": null,
    "read_only": null
   }
  },
  "open_incidents": [
   "electrum-wallet-fake-server-fee-bump-theft"
  ]
 },
 "incidents": [
  {
   "id": "electrum-wallet-fake-server-fee-bump-theft",
   "url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "path": "/incidents/electrum-wallet-fake-server-fee-bump-theft/",
   "json_url": "https://patchgap.ai/incidents/electrum-wallet-fake-server-fee-bump-theft.json",
   "title": "Electrum Bitcoin wallet: bad servers can trick you into paying a thief. Update to 4.8.3.",
   "category": "wallets",
   "platforms": [
    "windows",
    "macos",
    "linux"
   ],
   "products": [
    "electrum"
   ],
   "status": "patched",
   "status_label": "Patched: update now",
   "severity": "high",
   "severity_source": "Electrum's own advisory rates it High.",
   "exploited_in_wild": "yes",
   "exploited_note": "Electrum's advisory says some servers are doing this right now, and two users reported it. One lost money.",
   "exploited_source_url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
   "confidence": "confirmed",
   "confidence_note": null,
   "first_reported": "2026-10-23",
   "updated_at": "2026-10-27",
   "cves": [
    "CVE-2026-117601"
   ],
   "summary": "Electrum is a Bitcoin wallet app. It talks to servers to learn about payments. A bad server can hide a payment you just sent and show a fake one that pays a thief instead. If you then use the 'increase fee' button, you sign the fake payment and the thief gets paid. Electrum 4.8.3 fixes this. Electrum says it is already happening.",
   "am_i_affected": "You are at risk if you use Electrum older than 4.8.3 and connect to servers you do not run yourself. Electrum says people who connect to a server they trust, such as their own, are not affected.",
   "action": "Update Electrum to 4.8.3",
   "affected": [
    {
     "product": "electrum",
     "product_name": "Electrum",
     "platform": "windows",
     "affected_versions": "Electrum older than 4.8.3",
     "fixed_version": "4.8.3",
     "fixed_min": "4.8.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES"
     ],
     "check": {
      "menu_path": "Open Electrum. Click Help > About Electrum.",
      "command": "Get-ItemProperty 'HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*' -ErrorAction SilentlyContinue | Where-Object DisplayName -like '*Electrum*' | Select-Object DisplayName,DisplayVersion",
      "shell": "PowerShell",
      "read_only": true
     },
     "official_download": "https://electrum.org/#download"
    },
    {
     "product": "electrum",
     "product_name": "Electrum",
     "platform": "macos",
     "affected_versions": "Electrum older than 4.8.3",
     "fixed_version": "4.8.3",
     "fixed_min": "4.8.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES"
     ],
     "check": {
      "menu_path": "Open Electrum. Click Help > About Electrum.",
      "command": "defaults read \"/Applications/Electrum.app/Contents/Info\" CFBundleShortVersionString",
      "shell": "Terminal",
      "read_only": true
     },
     "official_download": "https://electrum.org/#download"
    },
    {
     "product": "electrum",
     "product_name": "Electrum",
     "platform": "linux",
     "affected_versions": "Electrum older than 4.8.3",
     "fixed_version": "4.8.3",
     "fixed_min": "4.8.3",
     "fix_note": null,
     "fixed_source_urls": [
      "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
      "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES"
     ],
     "check": {
      "menu_path": "Open the app and look in its Help or About menu, or check your software manager.",
      "command": null,
      "shell": null,
      "read_only": null
     },
     "official_download": "https://electrum.org/#download"
    }
   ],
   "fix_steps": [
    "Go to electrum.org and download Electrum 4.8.3 or newer. Check the signature the way the website explains.",
    "Install it over your old copy. Your wallet files stay in place.",
    "Until you update: before you sign ANY payment (including a fee increase), read the address and the amount on screen to make sure they are right.",
    "Do not use the 'increase fee' button on a payment you do not recognize."
   ],
   "official_patch_links": [
    {
     "label": "Electrum: official download",
     "url": "https://electrum.org/#download"
    }
   ],
   "extra_checks": [],
   "sources": [
    {
     "url": "https://github.com/spesmilo/electrum/security/advisories/GHSA-6jp4-8v48-cc5v",
     "title": "Electrum security advisory GHSA-6jp4-8v48-cc5v",
     "date": "2026-10-24",
     "kind": "ghsa",
     "official": true
    },
    {
     "url": "https://raw.githubusercontent.com/spesmilo/electrum/refs/heads/master/RELEASE-NOTES",
     "title": "Electrum release notes for 4.8.3 (Oct 23, 2026)",
     "date": "2026-10-23",
     "kind": "vendor",
     "official": true
    }
   ]
  }
 ]
}