Lightning Network Wallet System LNbits Releases 1.7.0 Security Update

On November 11, according to an official LNbits announcement, the Lightning wallet system LNbits has released security update 1.7.0, requiring all operators to upgrade before running the service. The project team stated that the vulnerability discovered on November 8 affects all prior versions, placing funds in older versions at risk of theft.

LNbits noted that credentials leaked prior to the upgrade may still allow attackers to maintain access after upgrading. The project team recommends that operators reset all wallet keys, replace funding sources and other sensitive credentials; if a server compromise is suspected, the new version should be installed on a fresh server and relevant logs should be retained.