Electrum Hack

REPORTED LOSS $949K
Low Access Control

What happened

The hacker setup a whole bunch of malicious servers.

The hacker's wallet:

https://www.blockchain.com/btc/address/1MkM9Q6xo5AHZkLv2sTGLYb3zVreE6wBkj

If someone's Electrum Wallet connected to one of those servers and tried to send a BTC transaction, they would see an official-looking message telling them to update their Electrum Wallet, along with a scam URL:

https://user-images.githubusercontent.com/29142493/50359293-8780b500-055c-11e9-8cfd-83b342edeffb.png

"There is an ongoing phishing attack against Electrum users. Our official website is https://electrum.org Do not download Electrum from any other source." - Electrum stated.

Case & protocol details

Classification Other
Protocol Type Exploit/Access control
Official Website electrum.org/
Protocol Twitter/X @ElectrumWallet

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Sources and on-chain records

Browse all hacks

Other incidents recorded with the same attack technique.

AFX $24.1M
B² Network $3.8M
Third-party SquidRouterModule $3.2M
StablR $12.8M

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes