As reported by ChainCatcher on November 11, 2026, at 09:28 (UTC+8), citing Cointelegraph, Bitcoin Lightning Network wallet platform LNbits released version 1.7.0 after a wave of attacks that led to stolen funds. LNbits urged users to update immediately and warned that the vulnerability affects all earlier versions.
Updating alone will not protect users whose credentials have already been exposed, LNbits said. It recommended resetting wallet keys, changing related credentials and migrating servers if a compromise is suspected. LNbits founder Ben Arc said the team was working to respond after users and the team suffered losses.
One user reported that an attacker created a new account on their LNbits instance and stole approximately 0.023 BTC. The report does not establish the total amount stolen.