Electrum developers released an urgent security update after discovering a vulnerability that allowed malicious servers to alter transaction addresses and artificially inflate network fees.