Key Highlights: LNbits released version 1.7.0 as an urgent security update following an exploit discovered on November 8, 2024, that drained user funds. Kevin Ravensberg reported a loss of 2,285,545 satoshis from Telegram tipping service BitTipBot after attackers created unauthorized accounts. Node operators running versions prior to 1.7.0 face critical fund-drain risks and are urged ...
Key Highlights: LNbits released version 1.7.0 to harden authentication, extension management, and payment handling following an exploit, warning that updating alone does not revoke unauthorized access. Operators suspecting compromise must stand up fresh servers, preserve forensic logs, rotate user wallet private keys, revoke funding-source credentials, and rebuild connected extensions. Security firm SlowMist recorded a 2,285,545-satoshi ...
Key Highlights: LNbits issued an urgent warning instructing server operators to immediately shut down their instances following a wave of cyberattacks targeting a critical vulnerability. The vulnerability affects all LNbits software versions prior to release 1.7.0, putting users’ funds at direct risk of unauthorized theft. Developers released an emergency patch and warned operators to rotate ...
Key Highlights: The BitTipBot attack spanned approximately five hours between 9:22 UTC and 14:00 UTC, leaving user funds inaccessible pending emergency software patches. LNbits instructed node operators to shut down instances as it prepares to release multiple security updates within 24 to 48 hours of its advisory. While the BitTipBot operator has committed to reimbursing ...