In a report published on November 11, 2026, PANews, citing Cointelegraph, said the Bitcoin Lightning Network wallet platform LNbits had urgently released version 1.7.0 after a recent wave of attacks that stole funds, and had urged users to update immediately.
LNbits warned that the flaw affects all earlier versions. An upgrade by itself does not protect users whose credentials have already leaked. It recommended resetting wallet keys, replacing the related credentials, and migrating the server if an intrusion is suspected.
Founder Ben Arc said that after users and the team suffered losses, the team was working to respond. Some users reported that attackers used their LNbits instances to create new accounts and stole about 0.023 bitcoin.
The report describes a compromise of the instance an operator runs. It does not describe a routine payment in which someone connects a wallet, signs a message, grants an approval, or sends a single transaction. The stated response follows that split: version 1.7.0 is the update for software still on an earlier release, while leaked credentials are treated as a separate custody problem that the upgrade does not undo. The report gave no broader loss total, no fee figure, and no technical description of the flaw beyond that warning.
Original report: PANews, November 11, 2026, 09:27 UTC+8, citing Cointelegraph.
