LNbits rushed out a security overhaul in version 1.7.0 after attackers allegedly created accounts and withdrew funds on November 8, forcing all operators to upgrade immediately.
The release, posted on Tuesday, November 10, warns that all prior versions are vulnerable and advises operators to upgrade before restarting servers to prevent further loss.
If compromise is suspected, operators are urged to set up a fresh server, rotate wallet keys, replace API credentials, and review extensions like NWC Provider and LNDHub to reclaim control.