The open-source Lightning Network platform LNbits released version 1.7.0 on November 10 as an urgent security update. This release follows a series of attacks that began on November 8, which resulted in unauthorized account creation and fund withdrawals across multiple instances.
One operator, BitTipBot, reported the loss of 2,285,545 satoshis, or approximately 0.0229 BTC, during the incident. The project team advised all operators to upgrade their servers immediately, noting that versions prior to 1.7.0 remain vulnerable to theft.
The developers recommend that operators who suspect a compromise should deploy a fresh server rather than relying solely on an update. Additional security measures include rotating user wallet keys, replacing API credentials, and reviewing connections for extensions like LNDHub and Bolt Cards.
Version 1.7.0 introduces security hardening for authentication and payment handling, alongside new features such as TOTP two-factor authentication, BOLT12 support, and on-chain wallet functionality. The project has not yet disclosed the total amount of funds lost in the attacks.
