KEY POINTS
- LNbits released version 1.7.0 on Tuesday to fix vulnerabilities affecting all earlier versions.
- Operators were told to reset wallet keys and funding-source credentials, because updating alone does not protect compromised installations.
- One user said attackers withdrew about 2.3 million satoshis, or 0.023 Bitcoin, from his instance.
LNbits, a platform for running Bitcoin Lightning wallets, has asked users to update right away after a wave of attacks on LNbits instances led to stolen funds. Cointelegraph reported the news, noting that the project issued an emergency patch to deal with the problem.