CONNECT WITH US
Web3 & Blockchain

Web3 & Blockchain

LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds

Bitcoin Magazine logo

Published on

Add as a preferred source on Google
LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds

Bitcoin Magazine

LNbits Releases 1.7.0 Urgent Security Update After November 8 Attacks Drain Funds

LNbits, the open-source Lightning Network wallet and accounts platform, released version 1.7.0 on November 10 as an urgent security update and instructed all operators to upgrade before restarting their servers. The project’s official X account posted the announcement with a link to the GitHub release, calling it a “SECURITY UPDATE”.

The release follows a wave of attacks that began over the weekend. On November 8, LNbits posted on X that all users should stop their LNbits servers immediately after reporting active attacks, adding that security patches were being prepared and that it was “better to err on the side of caution.” 

The project also disabled instances on its hosted service. Multiple reports documented unauthorized account creation and fund withdrawals. 

Kevin Ravensberg, operator of the Telegram tipping service BitTipBot, publicly stated that attackers created new accounts on his instance and withdrew 2,285,545 satoshis (approximately 0.0229 BTC) between roughly 09:22 and 14:00 UTC on November 8.

According to the official upgrade guidance published alongside the release, versions prior to 1.7.0 are affected and “funds running on prior versions of LNbits are at risk of being stolen.” The project stated that 1.7.0 includes security fixes in response to the incident discovered on November 8 and that a full technical report on the exploit will follow. 

Operators are advised to set up a fresh server if compromise is suspected, because updating alone cannot remove access an attacker may already have gained.


Source link
Related Topics:Web3 & Blockchain

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.