LNbits rushes emergency patch after reported Bitcoin wallet thefts
Summary
LNbits urged operators to update to version 1.7.0 after attacks on its Bitcoin Lightning wallet software led to stolen funds. The release fixes vulnerabilities and improves authentication, extension management and payment handling; all earlier versions are affected. LNbits advised shutting down servers during its investigation and warned that updating alone is insufficient if credentials were exposed. Operators should reset wallet keys and funding-source credentials, replace stored secrets and consider moving to a fresh server if compromise is suspected. LNbits has not disclosed the exploit’s details or the total number of victims. One user reported losing about 2.3 million satoshis.
