LNbits has released version 1.7.0 following an attack in which funds were stolen, Odaily reported on November 11, 2026, at 09:29 (UTC+8), citing an official LNbits announcement. The Bitcoin Lightning wallet platform urged users to update immediately and warned that the vulnerability affects all earlier versions.
Updating alone is not enough if credentials have been exposed. LNbits advised affected users to reset wallet keys and replace related credentials. It also recommended moving to another server if they suspect their server was compromised.
LNbits founder Ben Arc said users and the team had suffered losses and that the team was working to respond. One user reported that an attacker created a new account on their LNbits instance and stole approximately 0.023 BTC.