Alby Hub Flaw Exposes Bitcoin Wallets to Takeover by Attackers
A critical flaw in Alby Hub, a self-hosted Lightning wallet for Bitcoin, could have allowed attackers to take over users' wallets and send their funds if the owner had made the Hub reachable from the internet.
The flaw affected versions v1.7.0 through v1.18.5 of Alby Hub, which were released before August 2025. However, versions v1.19.0 and later do not have this issue, and users are advised to update their software as soon as possible.
Alby has warned that one user has been affected by the flaw, but it did not specify whether the user lost any money. The company is recommending that users check their installed version of Alby Hub and update to v1.24.0 if necessary.