LNbits released version 1.7.0 on Tuesday after a wave of attacks hit installations of its Bitcoin Lightning wallet software and led to stolen funds.
The project called the update critical. It addresses vulnerabilities and strengthens authentication, extension management, and payment handling. But LNbits warned that updating alone will not protect operators whose credentials were already exposed. That point matters. An attacker who already has keys or secrets may still get in after the patch.
Attacks forced quick shutdowns
LNbits first warned operators on Sunday to disable its Paywall extension while it investigated a possible flaw. Just over an hour later, the project told users to shut down their LNbits servers immediately. It cited a wave of attacks. LNbits also took its own hosted installations offline.
The project has not yet published a full account of the exploit or said how many users were affected. In the patch announcement, LNbits said the vulnerability affects all versions before 1.7.0 and puts funds at risk of theft.
Ben Arc, the creator of LNbits, said on X that the past few days had been difficult. He said the team worked to get v1.7 out after users and the project suffered losses. In May, Arc said about 200,000 people run the software themselves. That self-hosted model gives operators control, but it also puts pressure on them to act fast when a security warning lands.
Users told to reset keys and secrets
LNbits urged operators to reset wallet keys, replace funding-source credentials, and treat secrets stored in LNbits settings as compromised. It also recommended moving to a fresh server if a compromise is suspected. These steps go beyond a simple version update, and perhaps that is the main takeaway for anyone who ran an exposed instance.
One user, Kevin Ravensberg, said attackers used newly created accounts to withdraw about 2.3 million satoshis, or 0.023 Bitcoin, before he could shut down his server. LNbits said a separate report with details on the exploit would follow.
Cointelegraph reached out to Ben Arc and LNbits for comment.
The post LNbits releases emergency patch after reported Lightning wallet thefts appeared first on TheCryptoUpdates .
