Swiss hardware signer taking BTC and Lightning.
Electrum
Long-running Bitcoin wallet with no account and locally held keys.
electrum.org
- Zero KYC
- DE
- Evidence and facts →
Long-running Bitcoin wallet with no account and locally held keys.
Evidence and facts
Evidence and facts
monitoring · high · since 2026-10-11
Electrum's October 24 advisory reports exploitation of versions before 4.8.3: a malicious server can replace a just-broadcast transaction in wallet history with an invalid transaction paying an attacker. Manually fee-bumping that transaction can sign the attacker payment. The developers report two user reports, including one loss. Version 4.8.3 includes signature checks for wallet-owned inputs; the patch is not evidence that lost funds were recovered. Electrum developer security advisory GHSA-6jp4-8v48-cc5v
Specs
Review analysis, source material, related services, and history
About
Bitcoin desktop and Android wallet running since 2011. No account, keys stay local, and releases are reproducible and signed.
Ownership and funding
Corporate identity
Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.
- LEGAL ENTITY
- Electrum Technologies GmbHsource ↗
- INCORPORATED IN
- Germany, per publisher imprintsource ↗
- REGISTERED ADDRESS
- Paul-Lincke-Ufer 8 D, 10999 Berlin, Germanysource ↗
Frequently Asked Questions
Is identity verification required?
No identity verification is recorded for typical use. Local wallet use needs no account or identity check. Connected servers still receive wallet queries and connection data.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is DE, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. No hosted operator data is recorded. Jurisdiction is shown as context, not a safety verdict. Source coverage is verified evidence, last reviewed 2026-10-25, and recorded risk is caution.
Sources and history
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.