LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds
By Juan Galt
AI summary of the source article
LNbits released version 1.7.0 as an urgent security update on November 10 following attacks that drained funds from server instances. Operators were urged to upgrade immediately after unauthorized account creation and withdrawals were reported on November 8.
Why it matters
According to the official upgrade guidance, versions prior to 1.7.0 are affected and "funds running on prior versions of LNbits are at risk of being stolen."
Key facts
- LNbits issued version 1.7.0 on November 10 after November 8 attacks led to unauthorized account creation and fund withdrawals.
- Telegram tipping service BitTipBot reported an attacker withdrew 2,285,545 satoshis (roughly 0.0229 BTC) during the incident.
- The update includes security hardening across authentication, extension management, and payment handling, along with features like BOLT12 offer payments and TOTP two-factor authentication.
Source excerpt · Bitcoin Magazine
Bitcoin Magazine LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds LNbits released version 1.7.0 on November 10 as an urgent security update following active attacks that began November 8. Operators must upgrade before restarting servers as prior versions put funds at risk of theft. This post LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drai…