Electrum maintainers released version 4.8.3 to add signature checks for wallet-owned unconfirmed transactions

Overview Debates Related claims Topics Sources

An intruder who breached Keystone's website on October 20, 2026, obtained a WebAuth key used during manufacturing to verify device authenticity, which cannot be erased or rewritten once burned into hardware

Keystone froze unsent website orders and shifted online sales to preorders while manufacturing units with a newly generated WebAuth key

Keystone confirmed hardware wallets delivered before October 20, 2026, are safe if authenticity checks pass, but advised contacting support before initializing devices received with the old WebAuth key after October 20, 2026

Keystone stated that the WebAuth key stolen in the October 20 breach does not play a role in generating recovery phrases, deriving private keys, or signing cryptocurrency transactions

Keystone explicitly warned users that it will not request physical device returns and cautioned against scam messages claiming to offer device recalls or asset migrations

Cc9f267dcNews eventClaim

An Electrum user operating a two-of-three multisignature Trezor setup submitted an incident report after noticing a substituted outgoing transaction in local history

Attackers running malicious Electrum servers generated lookalike receiving addresses matching the final four characters of legitimate payment destinations to deceive users checking transaction histories

An Electrum user named Raju-K12 reported on October 18, 2026 losing funds after increasing the transaction fee on a zero-fee transaction substituted by a malicious Electrum server

In one documented attack against user dannydeezy, a rogue Electrum server's substituted transaction matched dannydeezy's original transaction's inputs and locktime while directing funds to a fake destination ending in GyQ3

Electrum version 4.8.3 checks signatures only on wallet-owned inputs, leaving unconfirmed incoming transactions unchecked because the client lacks a full script interpreter

Keystone Hardware Wallet confirmed that sensitive cryptographic credentials, including seed recovery phrases and private keys, remained unexposed during the October 20, 2026 unauthorized access to its website

Hardware wallet manufacturer Trezor disclosed a customer data breach in August 2026 caused by unauthorized access at its third-party logistics provider, ShipMonk

Following the unauthorized access to its website on October 20, 2026, Keystone Hardware Wallet blocked unauthorized access, patched the website vulnerability, and began notifying customers affected by the breach via email

Keystone Hardware Wallet stated that payment card details, bank details, and wallet passwords were not compromised during the October 20, 2026 website breach

Keystone Hardware Wallet confirmed on October 23, 2026, after reviewing API activity with Shopify, that a third party had obtained customer data

The third-party access to Keystone Hardware Wallet's official website on October 20, 2026, specifically resulted in unauthorized access to customer shipping information held by the company

The October 20, 2026 website breach at Keystone Hardware Wallet exposed customer names, contact details, shipping addresses, and order details including items purchased and prices

Hardware wallet maker Ledger confirmed in October 2026 that criminals had modified genuine hardware devices to steal recovery phrases before reselling them through Southeast Asian distributors

Keystone Hardware Wallet initiated an investigation into the October 20, 2026 website breach and announced plans to release a detailed investigation report in subsequent days

Keystone Hardware Wallet disclosed on October 24, 2026 that unauthorized actors accessed its official website on October 20, 2026