How to Check a Software Wallet—and What the Checks Cannot Prove

Fake Firefox extensions targeted recovery phrases; Electrum patched a genuine-client flaw that could trick users into signing a substituted payment.