If you use LNbits to hold or move bitcoin over the Lightning Network, an update alone may not be enough if your credentials have been exposed.
In a report published on November 11, 2026, at 09:29 (UTC+8), Odaily said LNbits had released version 1.7.0 after a recent theft and urged users to update immediately. According to LNbits’ announcement, the vulnerability affects all earlier versions. LNbits also advised users to reset wallet keys and replace related credentials; if they suspect their server was compromised, it recommended migrating the server.
LNbits founder Ben Arc said the team was working to respond after users and the team suffered losses. Separately, one user reported that an attacker created a new account on their LNbits instance and stole approximately 0.023 BTC. That figure is the user’s reported loss, not a confirmed total for the incident.