LNbits rushes emergency patch after reported Bitcoin wallet thefts

What happened: LNbits released version 1.7.0 as an emergency patch after attacks on its Bitcoin Lightning wallet instances resulted in stolen funds. The project urged operators to upgrade and replace potentially exposed credentials. Key numbers: Version 1.7.0 published Tuesday. Why it matters: LNbits said the vulnerability affects all versions before 1.7.0 and puts funds at risk of theft, and warned that credentials exposed before upgrading could still give attackers access. The project has not yet detailed the exploit or how many were impacted.

LNbits released version 1.7.0 as an emergency patch after attacks on its Bitcoin Lightning wallet instances resulted in stolen funds. The project urged operators to upgrade and replace potentially exposed credentials.

LNbits said the vulnerability affects all versions before 1.7.0 and puts funds at risk of theft, and warned that credentials exposed before upgrading could still give attackers access. The project has not yet detailed the exploit or how many were impacted.