LoginSign Up
← Back to all sparks
L

LNbits

FINANCE
Velocity6.3

Lightning Network wallet and accounts system with extensions

lnbits.com ↗

LNbits 1.7.1 follows the urgent 1.7.0 fix by rotating auth keys.

lightning-networksecurity-hardeningbolt12self-hostedbitcoin
◆Current state
LNbits shipped v1.7.1 a day after 1.7.0, a security patch that rotates authentication keys, and again asks every operator to update immediately. 1.7.0 paired critical security fixes with TOTP two-factor login, on-chain wallets, BOLT12 offer payments, a job scheduler and outgoing payment webhooks.
◆Where it's heading
LNbits is moving from a Lightning wallet layer toward a broader payments platform with WASM extensions, on-chain wallets and BOLT12, while a security incident forces quick follow-up patches. Key rotation suggests the 1.7.0 issue may have exposed existing credentials.
◆Prediction
Expect more 1.7.x patches and security guidance in the coming days before attention returns to the new wallet and payment features.

◆Recent moves

  1. 2d ago

    LNbits 1.7.1 security patch rotates auth keys

    A second urgent patch in two days rotates authentication keys after the 1.7.0 security release. Operators must update again; it extends the fix rather than adding features.

    View source ↗
  2. 3d ago

    LNbits 1.7.0: urgent security fix plus 2FA and on-chain wallets

    ⚡ SPARK

    The largest release since 1.6.0 pairs critical security fixes with new capability: two-factor login, on-chain wallets, BOLT12 payments and automatic extension updates. It hardens the extension platform 1.6.0 opened.

    View source ↗
  3. 3d ago

    LNbits 1.7.0 release candidate 4 fixes packaging

    The last release candidate fixed packaging builds, hours before 1.7.0 shipped.

    View source ↗
  4. 15d ago

    LNbits 1.7.0 release candidate 2 (no notes)

    A release candidate tag whose note is only a version bump. It signals 1.7.0 is close without saying what changes.

    View source ↗
  5. 1mo ago

    v1.6.2 - Tal (PostgreSQL backup hotfix)

    A targeted hotfix for the PostgreSQL backup feature introduced in v1.6.0, keeping the release branch stable as v1.6.x rolls out to production instances.

    View source ↗
  6. 2mo ago

    v1.6.1 - Tal

    v1.6.1 closes functional gaps opened by the v1.6.0 wave: NWC payment-failure false positives, LNURL-pay payer-detail restoration, and improved async tooling for the new WASM runtime. The Blink funding source gets caching and exponential backoff, reducing polling pressure on the external API.

    View source ↗