Alby Bitcoin vulnerability lets attackers drain funds from Lightning wallets

Bitcoin Lightning wallet provider Alby has confirmed a critical security flaw in older versions of its Alby Hub software, and the company says the bug could let attackers slip into accounts and move funds without permission. The disclosure, first reported by The Block, marks one of the more serious security incidents to hit Lightning Network infrastructure in recent memory, and it’s already forced at least one user to deal with real financial fallout.

Key takeaways

• Alby confirmed a critical vulnerability in older versions of its Alby Hub software.
• The flaw could allow attackers to gain unauthorized access and send funds from affected wallets.
• At least one user has already been confirmed as affected by the exploit.
• Alby is urging anyone running a vulnerable, publicly accessible version to update immediately.

Critical Vulnerability Discovered in Alby Hub Software

The Alby Bitcoin vulnerability centers on outdated builds of Alby Hub, the self-hosted node software that powers Lightning wallets and payment infrastructure for the platform’s users. Alby has acknowledged the issue directly, confirming that older versions of the software carry a security gap serious enough to warrant an emergency response.