According to Bitcoin Magazine, LNbits released version 1.7.0 on November 10 as an urgent security update following active attacks that began on November 8. The Lightning Network wallet platform instructed all operators to upgrade before restarting servers after unauthorized account creation and fund withdrawals were discovered across multiple instances.
Kevin Ravensberg, operator of the Telegram tipping service BitTipBot, reported attackers created new accounts and withdrew 2,285,545 satoshis (approximately 0.0229 BTC) between 09:22 and 14:00 UTC on November 8. LNbits stated that versions prior to 1.7.0 are affected and "funds running on prior versions are at risk of being stolen." A full technical report on the exploit will follow.