Possible large transaction fee via two Segwit transactions

[tsusanka]

Impact: Destruction of Funds
Scalability: Remote (Interaction)
Severity: High
Fixed in: Firmware 1.9.1 for Model One and 2.3.1 for Model T
Reported by: Saleem Rashid
Date reported: 2020-03-03

Details

Due to a design flaw in BIP-143 an attacker could create two Segwit transactions which, when combined together, can send the coins from wallet via a massive transaction fee.

Read more

Official blogpost