Electrum has released version 4.8.2 with a set of security fixes and broader hardening for its Bitcoin wallet codebase, according to a post by Bitcoin News on X. The release incorporates findings reported by Bitcoin Red Team, Calle, l0rinc, haoxucu, and m0wer. A key fix addresses a critical backup issue affecting some Lightning wallets that used non-deterministic keys and anchor channels. In those cases, channel backups and full wallet backups could miss the keys required to move funds on-chain after requesting a remote force close. Impacted users will see a warning when starting Electrum and are advised to export a new backup, as older backups cannot correctly recover funds in that scenario. The update also tightens Lightning HTLC validation, rejects malformed xpub/xprv keys that may previously have been accepted, expands security hardening across the codebase, and prevents the Android QR code scanner from reading screenshots. The release is Electrum’s third security-focused update since July, following versions 4.8.0 and 4.8.1.
Electrum has released version 4.8.2 with multiple security fixes and added hardening for its Bitcoin wallet codebase, according to a post by Bitcoin News on X. The changes were based on reports from researchers including Bitcoin Red Team, Calle, l0rinc, haoxucu, and m0wer.
Critical backup issue fixed for some Lightning wallets
The release fixes a critical backup problem that affected some Lightning wallets using non-deterministic keys and anchor channels.
In affected cases, channel backups and full wallet backups could be missing the keys needed to move funds on-chain after a remote force close was requested. Users affected by the issue will receive a warning when they start Electrum and should export a new backup. Older backups cannot correctly recover funds in that scenario.
Additional security checks added
Version 4.8.2 also strengthens Lightning HTLC validation, rejects malformed xpub/xprv keys that could previously be accepted, and expands security hardening across the codebase.
The release also prevents the Android QR code scanner from reading screenshots.
Third security-focused release since July
This is Electrum’s third security-focused release since July. The previous two versions were 4.8.0 and 4.8.1.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.