LNbits has released version 1.7.0 as a security update and says all operators should upgrade before running their services. According to an LNbits announcement reported by Deep Tide TechFlow on November 11, 2026, a vulnerability discovered on November 8 affects all earlier versions and puts funds held in older versions at risk of theft.
Upgrading alone may not remove an attacker’s access if credentials were exposed beforehand. LNbits advises operators to reset all wallet keys and replace funding sources and other sensitive credentials. If a server may have been compromised, it recommends installing the new version on a new server and retaining the relevant logs.
Original report, published November 11, 2026, at 09:31 (UTC+08:00).