Electrum

avoid.net/electrum→62/100·82% conf.

[AI-DRAFTED · AWAITING VERIFICATION]

62/100

[CAUTIONARY]82% conf.[Provisional]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

Summary

Electrum is an open-source, non-custodial Bitcoin wallet first released in November 2011 by Thomas Voegtlin and maintained by Electrum Technologies GmbH. It is widely regarded as one of the most feature-rich and long-standing Bitcoin desktop wallets, but has been the persistent target of large-scale phishing campaigns exploiting its open peer network architecture, resulting in more than $25 million in user losses documented between 2018 and 2020.

Connected Entities

1 entities

Organizations

□Electrum

Relationships

+ 10 more

Have evidence about Electrum?

Timeline(12 events)

1 November 2011

Electrum Bitcoin wallet first released by Thomas Voegtlin.

Electrum Official Website

1 January 2013

Electrum Technologies GmbH incorporated to develop and distribute the Electrum software.

Electrum Official Website

1 March 2016

Electrum 2.6 released, inadvertently introducing the JSONRPC missing-authorization vulnerability (CVE-2018-1000022) that would remain undetected for nearly two years.

Security Affairs

1 November 2017

User 'jsmad' privately reports the JSONRPC vulnerability to Electrum developers.

Vice/Motherboard

1 January 2018

Electrum releases version 3.0.4 attempting to patch the JSONRPC vulnerability; patch found to be incomplete. Version 3.0.5 fully addresses the flaw.

CVEdetails — CVE-2018-1000022

9 February 2018

CVE-2018-1000022 publicly disclosed with CVSS 3.0 score of 5.3 (Medium).

CVEdetails — CVE-2018-1000022

11 May 2018

Electrum team publicly exposes Electrum Pro, a copycat service at electrum.com distributing seed-stealing malware in Windows and macOS binaries.

CoinGeek

27 December 2018

First public reports of phishing attacks via malicious ElectrumX servers; approximately 200 BTC (near $1 million) stolen in initial wave.

Decrypt

1 April 2019

Electrum botnet (ElectrumDoSMiner) reaches over 152,000 infected hosts. Cumulative losses at this stage reported at approximately $4.6 million. Attackers pivot to DDoS against legitimate Electrum servers to force older clients onto malicious nodes.

The Hacker News

1 August 2020

A single user reportedly loses 1,400 BTC (approximately $15.8 million at the time) via the fake-update phishing scheme.

HackRead

1 September 2020

Cumulative phishing losses attributed to the multi-year campaign estimated at over $25 million (approximately 1,980 BTC) by investigative reporting.

Decrypt

20 September 2025

Electrum version 4.6.2 released, with continued active maintenance.

Electrum Wallet Review 2026 — TradersUnion

Provenance & Audit Trail

Anchored on Solana Verify on-chain12 Wayback Archives