3 ms·Every Bitcoin Electrum wallet since 2015 is insecure, update now – explanation9 points by davidgerard 9y agodavidgerard 9y agotl;dr JSON RPC server on localhost with wide-open CORS; any web page you go to could have stolen your coins. Publicised by Tavis Ormandy.