A flaw in Electrum, one of Bitcoin's oldest software wallets, let malicious servers replace pending transactions with fake ones that users could unknowingly approve when using Replace-by-Fee to raise fees. Because the wallet did not check signatures on unconfirmed transactions, it could sign a valid replacement sending coins to the attacker, and at least one user lost bitcoin after raising the fee. Developers received reports on Oct. 11 and Oct. 18, and released version 4.8.3 on Oct. 24 to add signature checks, six days after the first reported theft. Earlier versions remain vulnerable when connected to malicious servers, and the amount stolen has not been disclosed. Users should upgrade and verify addresses and amounts before signing; those using only trusted servers, including their own, were not exposed.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on CoinDesk ↗
Keywords
Open a keyword to see other news on the same topic.
Related tickers and likely impact
BTC/USDT
▼ Likely negativeBitcoin
Relevance: low
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $1.6T |
| Close on 10/25/2026 | 80,154.09 |
| Change that session | -0.91% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- AI agents help rescue ETH’s Glamsterdam fork, ‘Steal My Bitcoin’ site: Hodler’s Digest
The second and final testnet for Ethereum’s Glamsterdam hard fork was cancelled after ChainSecurity found vulnerabilities in two gas-scaling proposals (EIP-8037/8038) that could have affected at least 13 DeFi contracts. Derek Chiang of Eth Labs said the flaw was found only a few minutes before midnight, forcing everyone to scramble, and the Hoodi dress rehearsal will not be rescheduled until the second-order effects are fully analysed. To speed up the review, researchers from Eth Labs and the Ethereum Foundation deployed AI agents that coordinated through a message board in a GitHub repo, and a second board now examines EIP-8198 (“Quick Slots”) for the proposed Hegota fork. Separately, the ‘Steal My Bitcoin’ site, which has not been patched against the PHP2Shell vulnerabilities, holds the key to a Bitcoin wallet worth around $2000 and had gone 25 hours without a successful hack at the time of writing.
- Bitcoin Core Rewrites Its Security Policy for a World Where AI Finds Bugs in One Prompt
Bitcoin Core has updated its security policy so that bugs that are easily discoverable will be patched quickly rather than kept under a long embargo. The project will backport fixes to all maintained releases, ship a new version as fast as possible, and publish an advisory, since large language models have greatly lowered the effort needed to find such flaws and a quiet patch would accomplish little. The change was proposed by Chaincode Labs developer Antoine Poinsot and merged on Thursday. The article links the shift to AI-driven bug discovery, noting that an AI-driven audit logged nearly 5,000 findings across hundreds of crypto projects in early August, and that developers have patched AI-surfaced bugs in Lightning implementations and hardware wallets, while one Bitcoin bridge shut down.
- Bitcoin Core changes security rules as AI makes finding code bugs dangerously easy
Bitcoin Core has changed its security policy so that vulnerabilities an AI model could rediscover with a simple prompt will be quickly disclosed and patched, replacing embargoes that could last about a year. According to developer Antoine Poinsot, reports of easily rediscovered flaws rose as LLMs lowered the bar for finding certain bugs, though fixes may get less testing before reaching users. A volunteer group of 16 developers ran AI models across 390 bitcoin projects in about a day in late July, logging 4,962 findings, 85 of them critical. Separately, a Coldcard hardware-wallet firmware flaw dormant since 2021 let attackers drain 594 BTC in 25 minutes on July 30, with losses nearing $114 million across four sweeps.
- Bitcoin Core changes security policy as AI makes bugs easier to find
Bitcoin Core is changing its security disclosure policy because large language models have made some flaws easy to rediscover, so long embargoes offer little protection. Under the new policy, vulnerabilities deemed easily discoverable will be fixed as soon as possible across all maintained major versions, with security advisories published alongside the updates. Other flaws will follow severity-based schedules: low-severity bugs will be disclosed two weeks after the fix is released, while medium and high-severity bugs will be disclosed two weeks after the last affected release reaches End of Life, typically a year after the fix. The change follows a volunteer Bitcoin Red Team report of nearly 5,000 potential issues across 390 projects in August, though only about a fifth had been reproduced at that point.
- Crypto Firms Launch Quantum Alliance as 6 Million Bitcoin Sit Exposed
Nine blockchain organizations launched the Quantum Alliance, an open standards body that will define “quantum-ready” and set common ways to test quantum-resistance claims. The group warns that roughly 6.04 million BTC, about 30% of supply, is quantum-exposed because of elliptic-curve signatures, with forecasts pointing toward the late 2020s. A Google Quantum AI study cut the qubits needed to break Bitcoin’s cryptography to under 500,000, though no machine can do it yet. Modeled on the IETF, the Alliance will work in four groups covering migration, zero-knowledge systems, wallet security and cross-chain compatibility. Separately, a consortium backed by BlackRock, Strategy and Coinbase has committed $15 million to the problem.
- ‘Wow, it’s a real discovery’: Claude cracks a 25-year NSA number mystery
An Anthropic AI model traced five seeds for NIST elliptic curves, supplied by the NSA in the late 1990s, to an ordinary random-number generator fed with 1997 and 1998 timestamps, in under 30 minutes. The finding makes a hidden NSA backdoor less likely and requires no action from NIST curve users, though questions remain about how some elements were chosen. Bitcoin was not affected because it uses secp256k1, a simpler curve with little room to hide a weakness, though sufficiently powerful quantum computers could eventually pose a separate threat. The 25-year puzzle had a bounty that started at $12,288 and could rise past $36,000 if donated to charity.
Related markets
Latest news
- Over 11 million bitcoin has no known owner. Here's what it means
Galaxy Research's October snapshot classified about 11.1 million BTC, roughly 55% of the roughly 20.1 million mined, as held in addresses it cannot link to any known entity. Galaxy's head of research, Alex Thorn, said this suggests self-custody remains widespread, while Xapo Bank argued it shows retail investors have been in bitcoin for over a decade. The article cautions that this unattributed pool may include lost coins, unidentified institutional holdings and coins spread across complex custody setups. The other 45% has names attached, including exchanges, BlackRock-led ETFs, the U.S. government and the largest named holder, 'Satoshi Nakamoto (Patoshi Pattern),' at 1,123,658 BTC.
- 3 AI Infrastructure Stocks Linked To Data Center Power Demand
The article outlines a backdrop of elections in Brazil and Serbia, oil worries tied to the Middle East, and a big week of cloud and AI earnings from Alphabet, Microsoft and Amazon. It profiles three AI infrastructure stocks linked to data center power demand. Monolithic Power Systems, which designs power-management chips, has about US$3.3b in revenue and a US$56.0b market cap, and management expects Enterprise Data growth of at least 130% year over year, with data center exposure approaching 50% of revenue. Analog Devices, with about US$13.9b in revenue and a US$189.5b market cap, reports data center revenue at about 2b on an annualized basis and says its 2030 data center and energy market estimate has more than doubled versus last year. KLA, with a US$190.0b market cap, has a backlog of about US$12.5b and lead times extending into 2027 and 2028.
- Grupo Financiero Galicia (GGAL) Stock Sees Fair Value Cut As Analysts Turn More Cautious
Analysts cut their US dollar price target for Grupo Financiero Galicia from US$60 to US$45, and the updated fair value moved to ARS 10,537.61 from ARS 11,180.27. UBS kept a Neutral rating after trimming its target, while Itau BBA moved the stock to Market Perform from Outperform with a US$60 target, citing lower momentum. The fair value model update also revised revenue growth to 48.63% from 48.79%, net profit margin to 16.88% from 17.02%, future P/E to 9.5x from 10.0x, and the discount rate to 22.47% from 22.50%.
- NVDA Stock Ticks Higher Overnight: a16z Data Shows GPU Rental Prices Rising Sharply, Even For Older Chips
According to a16z, citing Ornn Data, Nvidia GPU rental prices have surged this year: H200 rates are up 160% and B200 up 120% since January, while RTX PRO 6000 rose about 65% and H100 35%. Even the six-year-old A100 costs more to rent than at the start of the year. a16z said rental prices across every GPU model it tracked were 9% to 143% higher than a straight-line six-year depreciation model would imply, suggesting chips are holding value better than expected. Token consumption on OpenRouter has climbed sharply since spring, though a16z cautioned this is only a partial view of AI demand. Meanwhile, AI-linked stocks sold off over the past two weeks, and NVDA is down 7.6% this month, closing at $210.96 on Friday.
- Billionaire Ken Griffin Is Buying This Dividend King That Wall Street Still Rates a Buy
Citadel Advisors, the hedge fund led by billionaire Ken Griffin, has been increasing its stake in AbbVie (ABBV) in recent months. In the second quarter, Citadel bought 2.7 million shares at an average price of $234.57, for about $633 million, bringing its holding to 3.2 million shares worth $909 million at the current price of about $284. The stock has risen about 24% this year and trades at 74 times trailing earnings, which some investors may view as expensive. The article's author nonetheless sees merit in AbbVie as a Dividend King that has raised its annual dividend for 50 consecutive years, currently $6.92 per share, a 2.43% dividend yield. The company has a strong brand lineup including Skyrizi, Rinvoq, Humira and Botox, and about 90 drugs and treatments in development; the FDA approved its once-daily Parkinson's pill Juvmo in September, and William Blair analysts expect its sales could reach as much as $1.4 billion annually by 2040. Of the 30 analysts tracked by Yahoo Finance, 24 rate the stock 'strong buy' or 'buy'.
- Nguyễn Xuân Ái Quốc Appointed Deputy General Director of SACOMBANK
SACOMBANK has appointed Nguyễn Xuân Ái Quốc as Deputy General Director, following a series of frequent personnel changes since the start of the year. Mr. Quốc has more than 20 years of experience in banking and finance at institutions including ANZ, HSBC, VIB, Commonwealth Bank of Australia and Westpac, and in recent years handled large corporate clients and complex large-scale financing deals. He is expected to drive customer-centric business, strengthen financial solution advisory, and improve coordination among business, product and risk management units. With this appointment, the bank's number of Deputy General Directors rises to nine. The article also recaps other changes: Nguyễn Đức Thụy became General Director from March 3, 2026 before moving to Standing Vice Chairman, with Loic Faussier taking over executive duties; Nguyễn Xuân Vũ was elected Vice Chairman from September 18, 2026; and several other deputy directors have resigned or left the bank.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.