Electrum released version 4.8.4 security update, fixing the Lightning Network onion message vulnerability

The Bitcoin wallet Electrum announced the release of version 4.8.4 on platform X, stating that this is another security update. According to the GitHub changelog, the release date of this version is November 6, and it fixes vulnerabilities related to Lightning Network onion messages: malformed onion messages from arbitrary sources may cause Electrum to disconnect from its channel peer nodes.

Electrum will currently discard all incoming onion messages until practical use cases are implemented. In addition, the new version also fixes issues such as the failure to recover some mnemonic phrases from versions prior to 2. The previous version of Electrum, 4.8.3, was released in late October and fixed a high-risk vulnerability that had been exploited in the wild.