Electrum Releases 4.8.4 Security Update to Fix Lightning Network Onion Message Vulnerability

November 8: Bitcoin wallet Electrum announced on X that it has released version 4.8.4, calling it another security update. According to the GitHub changelog, the version was released on November 6 and fixes a vulnerability related to Lightning Network onion messages: malformed onion messages from any source could cause Electrum to disconnect from its channel peers. Electrum will currently drop all incoming onion messages until actual use cases are implemented. In addition, the new version fixes issues such as the failure to restore some mnemonic seeds from versions prior to 2.0. Electrum's previous version, 4.8.3, was released in late October and fixed a high-severity vulnerability that had already been exploited in the wild.