If you use LNbits to hold funds on the Bitcoin Lightning Network, an update alone may not be enough if your credentials have been exposed.
In a report published on November 11, 2026, at 09:29 (UTC+8), Odaily said LNbits had released version 1.7.0 following a theft and urged users to update immediately. According to LNbits’ announcement, the vulnerability affects all earlier versions. LNbits also advised users to reset wallet keys, change related credentials and migrate servers if they suspect a server was compromised.
LNbits founder Ben Arc said users and the team had suffered losses and that the team was working to respond. Separately, one user reported that an attacker created a new account on their LNbits instance and stole approximately 0.023 BTC. That amount is the user’s reported loss, not a confirmed total for the incident.