A vulnerability was found in the Electrum wallet software which potentially allows random websites to steal your wallet via JavaScript. The bug presumably also affects altcoin derivatives of Electrum such as Electron Cash. If you don't use Electrum or a derivative, then you are not affected and you can ignore this.

Action steps:

1. If you are running Electrum, shut it down right this second.
2. Upgrade to 3.0.4 (making sure to verify the PGP signature).
3. You might want to send out all BTC at this point from old wallet and create new wallet in the new version.

You don't necessarily need to rush to upgrade. In fact, in cases like this it can be prudent to wait a while just to make sure that everything is settled. The important thing is to not use the old versions. If you have an old version sitting somewhere not being used, then it is harmless as long as you do not forget to upgrade it before using it again later.

If at any point in the past you:

- Had Electrum open with no wallet passphrase set; and,
- Had a webpage open

Then it is possible that your wallet is already compromised. (Though probably if someone has your wallet, then they already would've stolen all of the BTC in it...)

Electrum will presumably post more detailed info and instructions in the near future.

Source: BTCNaira