LNbits rushes emergency patch after reported Bitcoin wallet thefts

The project warned that installations running older versions were vulnerable and urged operators to replace potentially exposed credentials even after upgrading.

Bitcoin Lightning wallet platform LNbits has urged users to update immediately to its latest version after reporting a wave of attacks targeting LNbits instances that resulted in stolen funds. 

The project published version 1.7.0 on Tuesday, describing it as a critical release addressing vulnerabilities and strengthening authentication, extension management and payment handling. LNbits warned that updating alone would not protect installations whose credentials had already been compromised.

“It’s been a very challenging few days, working relentlessly to get the v1.7 release out after our users and we suffered losses,” LNbits creator Ben Arc said on X. 

Read more