What the developer wrote
Authored by SomberNight
testnet3/testnet4: update default servers
Please enter the commit message for your changes. Lines starting
What changed, and why it matters
This commit updates the built-in lists of default servers that Electrum wallet users connect to for Bitcoin test networks (testnet3 and testnet4). It adds, removes, and changes server addresses and protocol versions. There is no code change and no claim in the commit that this fixes a security issue. However, changing default servers can affect user privacy and trust, because wallets rely on these servers to learn about transactions. If a malicious server were added, it could spy on users or feed them bad information. The commit itself does not show that any added server is malicious, so this is best viewed as a routine infrastructure update with a low but non-zero security-relevant aspect.
Treat as a routine server-list refresh. Users on testnet3/testnet4 who rely on default servers should verify that their connections still work. For defense in depth, operators and auditors may want to independently check the reputation and uptime of the newly added servers, since default server lists are a trust anchor. No urgent patch action is indicated by the diff alone.
Security signals we found
Changes default trusted server list for testnet clients
Adds new onion (Tor) and clearnet server entries
Removes previously default servers (testnet.hsmiths.com, tn.not.fyi, mempool.space, testnet4-electrumx.wakiyamap.dev)
Bumps reported Electrum protocol versions on several entries
No executable code changes; configuration-only update
Evidence from the diff
The patch modifies electrum/chains/testnet/servers.json and electrum/chains/testnet4/servers.json. It replaces several clearnet and onion ElectrumX/Fulcrum server entries for Bitcoin testnet3/testnet4, bumps reported protocol versions (e.g., 1.4/1.5 to 1.6), and changes ports. No executable code is changed. The security relevance is indirect: default server lists influence which SPV servers clients trust for block headers, transaction history, and fee estimates. A compromised or hostile default server could perform transaction surveillance, eclipse attacks, or fee manipulation. The diff does not contain evidence that any listed server is malicious or that the change was made for a security reason.
Changed components
electrum/chains/testnet/servers.jsonelectrum/chains/testnet4/servers.jsonInspect captured patch +49 / −18
diff --git a/electrum/chains/testnet/servers.json b/electrum/chains/testnet/servers.json
index 86f3a5d..4545520 100644
--- a/electrum/chains/testnet/servers.json
+++ b/electrum/chains/testnet/servers.json
@@ -1,4 +1,10 @@
{
+ "3tc6nefii2fwoc66dqvrwcyj64dd3r35ihgxvp4u37itsopns5fjtead.onion": {
+ "pruning": "-",
+ "s": "50002",
+ "t": "50001",
+ "version": "1.6"
+ },
"blackie.c3-soft.com": {
"pruning": "-",
"s": "57006",
@@ -22,27 +28,28 @@
"t": "143",
"version": "1.4"
},
- "testnet.aranguren.org": {
+ "gsw6sn27quwf6u3swgra6o7lrp5qau6kt3ymuyoxgkth6wntzm2bjwyd.onion": {
"pruning": "-",
"s": "51002",
"t": "51001",
- "version": "1.4.2"
+ "version": "1.6"
},
- "testnet.hsmiths.com": {
+ "testnet.aranguren.org": {
"pruning": "-",
- "s": "53012",
- "version": "1.4.2"
+ "s": "51002",
+ "t": "51001",
+ "version": "1.6"
},
"testnet.qtornado.com": {
"pruning": "-",
"s": "51002",
"t": "51001",
- "version": "1.5"
+ "version": "1.6.0"
},
- "tn.not.fyi": {
+ "v22019051929289916.bestsrv.de": {
"pruning": "-",
- "s": "55002",
- "t": "55001",
- "version": "1.4"
+ "s": "50002",
+ "t": "50001",
+ "version": "1.6"
}
}
diff --git a/electrum/chains/testnet4/servers.json b/electrum/chains/testnet4/servers.json
index cfa0764..43a1095 100644
--- a/electrum/chains/testnet4/servers.json
+++ b/electrum/chains/testnet4/servers.json
@@ -1,19 +1,43 @@
{
- "testnet4-electrumx.wakiyamap.dev": {
+ "134.199.227.217": {
"pruning": "-",
- "s": "51002",
- "t": "51001",
- "version": "1.4"
+ "s": "50002",
+ "t": "50001",
+ "version": "1.6.0"
+ },
+ "bitcoin.stagemole.eu": {
+ "pruning": "-",
+ "s": "5010",
+ "t": "5000",
+ "version": "1.6.0"
},
"blackie.c3-soft.com": {
"pruning": "-",
"s": "57010",
"t": "57009",
- "version": "1.4"
+ "version": "1.6"
+ },
+ "fulcrum.theuplink.net": {
+ "pruning": "-",
+ "s": "60002",
+ "version": "1.6"
+ },
+ "gsw6sn27quwf6u3swgra6o7lrp5qau6kt3ymuyoxgkth6wntzm2bjwyd.onion": {
+ "pruning": "-",
+ "s": "52002",
+ "t": "52001",
+ "version": "1.5.3"
+ },
+ "testnet4.qtornado.com": {
+ "pruning": "-",
+ "s": "51012",
+ "t": "51011",
+ "version": "1.6.0"
},
- "mempool.space": {
+ "v22019051929289916.bestsrv.de": {
"pruning": "-",
- "s": "40002",
- "version": "1.4"
+ "s": "60002",
+ "t": "60001",
+ "version": "1.6"
}
}
Why this scored 19/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.