LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds

LNbits, the open-source Lightning Network wallet and accounts platform, released version 1.7.0 on November 10 as an urgent security update and instructed all operators to upgrade before restarting their servers. The project’s official X account posted the announcement with a link to the GitHub release, calling it a “SECURITY UPDATE”.

The release follows a wave of attacks that began over the weekend. On November 8, LNbits posted on X that all users should stop their LNbits servers immediately after reporting active attacks, adding that security patches were being prepared and that it was “better to err on the side of caution.” 

The project also disabled instances on its hosted service. Multiple reports documented unauthorized account creation and fund withdrawals. 

Kevin Ravensberg, operator of the Telegram tipping service BitTipBot, publicly stated that attackers created new accounts on his instance and withdrew 2,285,545 satoshis (approximately 0.0229 BTC) between roughly 09:22 and 14:00 UTC on November 8.

According to the official upgrade guidance published alongside the release, versions prior to 1.7.0 are affected and “funds running on prior versions of LNbits are at risk of being stolen.” The project stated that 1.7.0 includes security fixes in response to the incident discovered on November 8 and that a full technical report on the exploit will follow.