LNbits released version 1.7.0 after a fund theft attack and urges users to update immediately. The vulnerability affects all earlier versions. Upgrading alone won't protect users with leaked credentials; reset wallet keys, change credentials, and migrate servers if compromised. A user reported attackers used their LNbits instance to create new accounts and stole about 0.023 BTC.
Odaily星球日报讯 据 LNbits 官方公告，比特币闪电网络钱包平台 LNbits 在近期发生资金被盗攻击后发布 1.7.0 版本，并敦促用户立即更新。LNbits 警告，该漏洞影响所有较早版本；仅升级无法保护凭证已泄露的用户，建议重置钱包密钥、更换相关凭证，并在怀疑服务器遭入侵时迁移服务器。LNbits 创始人 Ben Arc 表示，用户和团队遭受损失后，团队正努力应对。有用户报告称，攻击者利用其 LNbits 实例创建新账户，盗走约 0.023 枚比特币。