
Attackers replaced legitimate transactions with fake ones, then waited for users to approve higher fees.
Attackers replaced legitimate transactions with fake ones, then waited for users to approve higher fees. At least one person lost bitcoin before developers patched the flaw.