Electrum disclosed that some servers hide your transaction and show a fake one. Users on their own or a trusted server weren't affected. That's "don't trust, verify" in practice. Update to 4.8.3. 🟧

GitHub
Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it
### Summary
The main Electrum server the client connects to is trusted with mempool ("unconfirmed") transactions. This is documented [design](ht...