LNbits releases emergency patch after wallet vulnerability
Key points
- LNbits released version 1.7.0 following a vulnerability discovered on 8 November 2026.
- All versions before 1.7.0 are affected, with funds potentially exposed to theft.
- The project urges operators to upgrade, reset wallet keys and replace compromised credentials.
LNbits released emergency software version 1.7.0 after discovering a security vulnerability on 8 November 2026.
The vulnerability affects every LNbits version released before 1.7.0, potentially exposing funds to theft.
The project warned that funds held on earlier versions remain at risk of being stolen.
Updating the software alone may not prevent further access if attackers previously obtained account credentials.
LNbits recommends installing the updated software on a fresh server when operators suspect their systems were compromised.
Operators must also reset wallet keys, replace funding-source credentials and revoke existing extension connections.
The project also advises reviewing connected applications and replacing sensitive information stored within LNbits settings.
The incident reinforces the need for wallet operators to secure credentials and revoke potentially compromised access.
Frequently asked questions
More from Crypto
TON Strategy reports $13.1 million in quarterly revenue
Poland’s Sejm backs bill allowing crypto freezes
Forward Industries expands Solana holdings to 8.7 million SOL
Grayscale commits $1 million to support Zcash ecosystem
Polymarket revenue run rate tops $1.8 billion
Ripple Prime names Noel Kimmel as Asch steps down
