Originally reported November 11, 2026, at 09:16 UTC+8.
LNbits urged operators of its Bitcoin Lightning wallet software to install version 1.7.0 after reporting attacks on LNbits instances and stolen funds. The project described Tuesday’s release as a critical patch for vulnerabilities affecting all earlier versions, with changes to authentication, extension management and payment handling. It has not yet detailed the exploit or said how many installations were affected.
The warning escalated after LNbits initially told operators on Sunday to disable its Paywall extension while it investigated a potential vulnerability. Just over an hour later, it urged users to shut down their servers, citing a wave of attacks, and took its own hosted installations offline.
Updating is not the only step for an exposed installation. LNbits warned that credentials compromised before an upgrade could still allow access afterward. It urged operators to reset wallet keys, replace funding-source credentials and treat secrets stored in LNbits settings as compromised. It recommended moving to a fresh server if a compromise is suspected.
One user, Kevin Ravensberg, said attackers withdrew about 2.3 million satoshis (0.023 BTC) from his instance through newly created accounts before he could shut it down. LNbits said a separate account of the exploit would follow.
Source: cointelegraph.com (originally published 2026-11-11 09:16 UTC+8)