LNbits Releases Emergency Security Patch After Bitcoin Wallet Theft Reports
Bitcoin Lightning wallet platform LNbits has released an emergency security update following a series of attacks that reportedly resulted in stolen funds. The project urged operators to upgrade immediately, warning that older software versions expose Bitcoin wallets to potential theft.
LNbits released version 1.7.0 on November 10, introducing critical vulnerability fixes and stronger security protections. However, developers cautioned that installing the update alone may not secure systems where attackers have already obtained sensitive credentials.
LNbits Warns Users After Security Attacks
LNbits provides software that allows businesses and individuals to operate Bitcoin Lightning wallets and payment applications. Its services support merchant payments, tipping platforms, subscription systems, and digital paywalls.
The security incident emerged on November 8 when LNbits warned operators about a possible vulnerability involving its Paywall extension. Shortly afterward, the project urged users to shut down their servers immediately as attacks continued.
LNbits also temporarily suspended its hosted installations to reduce potential exposure. The project’s creator, Ben Arc, subsequently acknowledged that users and developers had suffered financial losses during the incident.
According to the project’s security guidance, all LNbits versions released before 1.7.0 are vulnerable. However, developers have not disclosed the exact attack mechanism or confirmed the total financial damage.
Reported Bitcoin Theft Raises Concerns
One affected operator, Kevin Ravensberg, reported losing approximately 2.3 million satoshis, equivalent to about 0.023 BTC. He said attackers created unauthorized accounts and withdrew funds before he could shut down his server.
The reported incident highlights security risks associated with self-hosted cryptocurrency payment infrastructure. Although Lightning Network transactions enable fast Bitcoin payments, compromised wallet software can expose funds to unauthorized withdrawals.
Emergency Update Requires Additional Security Measures
The latest LNbits security patch strengthens authentication, extension management, and payment processing. Version 1.7.0 also introduces additional protections, including two-factor authentication and improved wallet management features.
Nevertheless, LNbits warned that previously exposed credentials could remain usable after installation. Operators must therefore reset wallet keys, replace funding-source credentials, and revoke potentially compromised access permissions.
The project also recommends replacing sensitive information stored in application settings. Operators who suspect their servers were compromised should consider deploying fresh installations rather than relying exclusively on software updates.
LNbits plans to publish a detailed technical report explaining the vulnerability and the attacks. Until then, the full extent of the losses remains unclear, leaving operators focused on securing their Bitcoin Lightning payment systems.
