If you run your own node on the Lightning Network using the Alby Hub software, you have had one concrete job since September 9, 2026: check the version number. If it reads anything between v1.7.0 and v1.18.5, and the management interface is reachable from the open internet, an attacker can gain unauthorised access and drain funds, according to the provider. Which puts the answer to the central question right at the top: check the version, close off access from the internet, update to v1.24.0, and change the unlock password afterwards.
Everything else in this article answers the questions that follow from there. Who is actually affected by the flaw, how do you tell that your installation was never exposed in the first place, and why is the fix older than the warning now making the rounds in the trade press.
What Alby Hub is and who actually runs this software
Alby Hub is software that lets you run a node on the Lightning Network yourself. The Lightning Network is a payment layer built on top of Bitcoin that moves small amounts almost instantly and at very low fees: two participants open a payment channel and only the opening and...
English (US)