LNbits releases 1.7.0 patch after attack, reminding affected users to reset credentials
BIBIBI
AT A GLANCE
LNbits released version 1.7 after a fund theft attack, warning that users whose credentials have been leaked are not protected by upgrading alone.
Article
LNbits Urgently Releases Patch Following Bitcoin Wallet Theft Incident
PANews, November 11 — According to Cointelegraph, the Bitcoin Lightning Network wallet platform LNbits has urgently released version 1.7.0 following a recent wave of attacks that resulted in stolen funds, urging users to update immediately. LNbits warned that the vulnerability affects all earlier versions and that upgrading alone cannot protect users whose credentials have already been compromised. It advised users to reset wallet keys, replace related credentials, and migrate servers if a breach is suspected. LNbits founder Ben Arc stated that the team is working hard to respond after users and the team suffered losses. Some users reported that attackers exploited their LNbits instances to create new accounts, stealing approximately 0.023 bitcoin.
PANews November 11, citing a report by Cointelegraph, LNbits urgently released version 1.7.0 following a recent attack that resulted in stolen funds, and urged users to update immediately.
02
LNbits warned that the vulnerability affects all older versions and that upgrading alone cannot protect users whose credentials have already been compromised.
03
LNbits recommends resetting wallet keys, replacing related credentials, and migrating the server when a breach is suspected.
04
LNbits founder Ben Arc said that after users and the team suffered losses, the team is working hard to cope.
05
Users have reported that attackers used their LNbits instance to create new accounts and steal approximately 0.023 bitcoins.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The key point of this message is not just updating the software: LNbits states that if wallet keys or related credentials have been compromised, installing a new version alone is insufficient to protect users. Therefore, the original text simultaneously recommends updating the version, resetting keys, replacing credentials, and migrating servers when compromise is suspected. Approximately 0.023 bitcoin represents user-reported losses and should not be treated as the total loss for the entire incident.
Why it matters to readers
The incident has already involved losses of user and team funds; for LNbits users, it is necessary to distinguish between software upgrades and the handling of leaked credentials, and upgrades cannot be regarded as the entirety of protective measures.
If you use LNbits, you should pay attention to the reminders in the original text about updating immediately and handling leaked credentials. The original text addresses LNbits and its earlier versions, and it cannot be concluded from this that all Bitcoin wallets are affected by the same vulnerability.
Risks and unknowns
The original text did not disclose the technical details of the vulnerability, the number of affected instances, or the total losses.
The loss of approximately 0.023 bitcoins came from user reports; the original text did not provide independently verified information.
The original text does not provide verification results for the effects of the 1.7.0 patch or whether the attacks have ceased.
Related Developments
Loading event timeline…
Related concepts
Wallet key
This term is not in the glossary yet. Browse related concepts in the glossary.