LNbits 1.7.0: check your version, then rotate what the old one could see
What happened On 10 November 2026 LNbits published v1.7.0, a critical security release. The project's notice says every version before 1.7.0 is affected and that funds on those versions can be stolen. Two days earlier it had asked operators to shut their servers down after a wave of attacks; Cointelegraph reported at least one operator losing about 0.023 BTC through newly created accounts. The…
On November 10th, 2026, LNbits released version 1.7.0 to address a critical security issue. They warned that any previous versions are vulnerable and urged operators to shut down their servers. One report indicated a server operator lost around 0.023 BTC. Once upgraded, accounts created after the update can still be accessed if the attacker has exposed credentials.
To check your current LNbits version, use the provided script. It compares your version to the security floor of 1.7.0 and advises upgrading if necessary. After upgrading, reset wallet keys, reconfigure connected apps, and replace funding-source credentials.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
