Alby said a critical vulnerability affects Alby Hub versions v1.7.0 through v1.18.5 if the management API is exposed to the public internet, creating a path for unauthorized access and possible fund transfers. The issue was highlighted in a post by Bitcoin News on X, which said Alby had confirmed the flaw. Alby added that one user is currently known to have been affected, while versions v1.19.0 and later are not impacted. The company advised affected users to restrict public access to the management interface, upgrade immediately to v1.24.0, and change their unlock password after updating. Alby also said the latest release fixes multiple issues reported by Bitcoin Team Red, Project Loupe, and other researchers.

Bitcoin wallet provider Alby said a severe vulnerability affected Alby Hub versions v1.7.0 through v1.18.5, covering releases published before August 2025. According to the team, if a Hub instance was reachable from the public internet, an attacker could access the management API, gain unauthorized access, and move funds out of the wallet. Alby said v1.19.0 and later are not affected, noting that v1.19.0 was released on Aug. 29, 2025. The company has confirmed that one user was impacted. For users running affected versions, Alby urged immediate action: restrict public internet access to the management interface and upgrade to the latest release, v1.24.0. It also said that users whose management interface had previously been exposed publicly should change their unlock password after upgrading. Even users on unaffected versions were advised to move to v1.24.0 to receive additional security improvements. Alby added that it plans to publish full details later under a responsible disclosure process.

Nostr Wallet Connect is gaining traction as an open standard linking Lightning wallets and apps. Its interoperable, low-integration, zero-custody model could accelerate web payments, subscriptions, and AI-agent payment use cases across the Bitcoin ecosystem.

Alby launches the waitlist for Alby Hub, a one-click Lightning node with self-custodial wallet and app store. It aims to simplify self-custody for Lightning users, challenging the dominance of custodial solutions.

Alby has opened the waitlist for Alby Hub, a one-click Lightning node application combining a self-custodial wallet and app connectivity. The product aims to reduce the friction of running a self-custodial Lightning setup.

Alby launches waitlist for Alby Hub, a one-click install Lightning Node with self-custodial wallet and app store. Cloud plan at 21k satoshis/month, DIY on Raspberry Pi. Aims to simplify self-custodial Lightning adoption.

Alby launches Alby Hub, a one-click Lightning node with self-custodial wallet and app store. Cloud plan costs 21k sats/month; DIY version also available. Hopes to lower barriers to self-custody.

Alby has opened the waitlist for Alby Hub, a one-click Lightning node app focused on self-custodial payments. The product combines a Lightning node, wallet, and app connections, aiming to reduce friction for users managing their own funds.