News · Security & Hacks
Operators are urged to deploy the patch immediately, rebuild suspect servers, and rotate all wallet keys to prevent theft.
Key point 1 of 3
01
LNbits detected a critical security vulnerability on Nov. 8, prompting the release of version 1.7.0 on Nov. 10.
Key point 2 of 3
02
All instances running versions prior to 1.7.0 place funds at risk of theft, requiring mandatory upgrades or fresh server deployments.
Key point 3 of 3
03
Operators must rotate user keys, funding-source macaroons, and integration secrets across services like LNDHub and NWC Provider.
Context
LNbits acts as an accounting and liquidity layer built atop Lightning Network backends, making its hot wallet instances prime targets for automated exploit attempts when software…
Why it matters
Node operators, self-hosted custodial platforms, and end users relying on connected applications like Bolt Cards and LNDHub face potential loss of funds if instances remain…
What to watch
Publication of the comprehensive LNbits post-incident report detailing the attack vector, alongside patch adoption metrics across node monitoring indices.
Sources
Built from 1 primary source, machine-checked before publication.
Keep reading
Read the full story
AI-generated, source-verified. Sources, citations and live prices on the article page.