Topic: This is what Electrum Wallet users must do to save their coins. (Read 222 times)

The DDoS attack Electrum server, not user who use Electrum wallet for Desktop.


It's only useful if you connect to Electrum server which isn't DDoS'ed and being honest / owned by yourself.

4. isn't necessary. electrum can be used. it wouldn't be worth using if it couldn't.

Not all users prefer a 3rd-party to handle one of their keys; not to mention, additional fees.

Just change "Ensure you have" to "Consider enabling" and inform the user that the service requires additional fee.
There have been users that were puzzled by the mysterious outputs in their transactions which happened to be the payment for 2FA service.

Pretty sure the loss is caused by the download of fake Electrum. As HCP mentioned, DDOS won't affect your balances at all.


If an attacker can somehow redirect or hijack your DNS, then it's possible they redirect that site to their own server, therefore allowing them to host a malicious file. I think verifying the signature of the file is better than making sure the URL of the site where you download the file, though it doesn't mean you can download Electrum from anywhere.

Both your highlighted comment and that article are somewhat misleading... the DoS attack is not really directly responsible for users losing coins. All the DoS attack is doing is making it a bit difficult to get connected to a "good" Electrum server and get your wallet synced. This does not in any way affect the safety or security of a users coins, especially if they are running the latest version. It is just inconvenient

For users who were on older versions... it possibly increases the chances of connecting to a "bad server" and getting the "fake update popup". But if you exercise the necessary precaution, you'll be fine.

You also forgot the most important part of safe Electrum use... Users absolutely must verify the digital signature of any and all Electrum downloads!

Hey as most of you’ll will know that Electrum wallet users were tricked in updating their wallets when a notification popped up inside it, and many lost their coins. It’s just been a while since that incident, and yesterday Electrum Wallet servers were hit by DoS attack, where many lost their coins but a single user lost 1,40,000$ due to the attack.

 I feel following these safety guidelines shall help you save your coins:

1) The update happened in the desktop version, and not the mobile version hence I would suggest to download the official Electrum app and transact via the official Electrum app only.

2) Electrum wallet for desktop must only be updated from this site https://electrum.org/#home only, do not update it any other way.

3) If you’re keen to use a desktop version visit the site and update it to the latest version for your own safety.

4) I would advise you not to do any transaction for next few days, and if you want to do I would once again suggest use the mobile version only for doing it.

5) Also it’s pertinent to note that you should immediately set your servers to connect manually, if it’s yet on automatic mode.

6) Ensure you have 2Fa on and clean your system with a good anti virus, this is for additional security.

Also if you have more ways one can protect their Electrum wallet post below so all can read it.

Link to the news : https://cointelegraph.com/news/electrum-faces-another-fake-wallet-attack-users-reported-to-lose-millions-of-dollars