Critical Vulnerability in Alby Hub Bitcoin Wallet Allows Potential Fund Theft

Bitcoin wallet company Alby warned of a critical flaw in Alby Hub that could allow an attacker to take over a wallet and send its funds. The vulnerability only affects instances where the owner made the Hub reachable from the internet. Alby Hub is a self-hosted Lightning wallet that runs on the owner's computer or server and holds their bitcoin. The flaw affects versions v1.7.0 through an unspecified later version.