LNbits Releases Version 1.7.0 and Urges Wallet Operators to Update

LNbits released version 1.7.0 and urged operators of its Bitcoin Lightning wallet platform to update after a user reported funds stolen through an LNbits instance.

LNbits warned that the vulnerability affects every version before 1.7.0. Installing the release will not secure a wallet if its credentials have already been exposed, the platform said.

It advised affected operators to reset wallet keys and replace related credentials. Operators who suspect a server intrusion should migrate the service to a new server.

One user reported that an attacker created a new account through their LNbits instance and stole about 0.023 Bitcoin (BTC). LNbits founder Ben Arc said users and the team had suffered losses and were working to address the incident.

The recommendations address separate risks: the affected software, exposed wallet credentials and a potentially breached server. Operators should change keys and credentials even after updating when access information may have leaked; server migration is intended for cases where the operator suspects the host was compromised.