Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Alby Hub internet-exposed wallet remediation advisory

Advisory/Mitigation
First reported
Last updated
Happening score
H score 37
1 unique sources, 1 articles

Summary

Hide ▲

Alby told Alby Hub owners on v1.18.5 or older that were reachable from the internet to block outside access, update to v1.24.0, and change the unlock password after update because the flaw could let an attacker take over a wallet and send its funds.

Related Happenings

Alby Hub internet-exposed wallet takeover security flaw

Vulnerability
H score33 First: 09.09.2026 13:43 Last: 09.09.2026 13:43 Sources 1

How related: Bitcoin wallet company Alby has warned of a critical flaw in Alby Hub that could have let an attacker take over a wallet and send its funds, but only where the owner had made the Hub reachable from the internet.

About this happening: A critical flaw in Alby Hub could let an attacker take over a wallet and send its funds when the wallet service was reachable from the internet. The affected r...

Open Happening

Alby Hub fixed release line (v1.19.0 and later)

Security Patch Release
H score30 First: 09.09.2026 13:43 Last: 09.09.2026 13:43 Sources 1

How related: Versions v1.19.0 and later do not have the flaw. The first release with that fix was published on August 29, 2025, so a Hub updated to any release published since then is not affected.

About this happening: Alby published the fixed Alby Hub release line starting with v1.19.0, closing the flaw that affected v1.7.0 through v1.18.5. The first corrected build shipped on Aug...

Open Happening

TrickMo Android banking trojan variant with TON C2 and network pivots

Malware Activity
H score26 First: 12.05.2026 15:50 Last: 12.05.2026 15:50 Sources 1

About this happening: A new TrickMo Android banking trojan variant now uses The Open Network (TON) for C2, turning infected phones into network pivots and traffic-exit nodes. It was obs...

Open Happening

Timeline

  1. 09.09.2026 13:43 2 articles · 2h ago

    Alby publishes the first fixed Alby Hub release

    Mitigation Patch Update

    Alby published the first fixed Alby Hub release on August 29, 2025, and said any Hub updated to releases published since then is not affected. The flaw remained limited to Alby Hub versions v1.7.0 through v1.18.5 when the management interface was reachable from the internet.

    Show sources
    Open in new tab
  2. 09.09.2026 13:43 1 articles · 2h ago

    Alby updates Alby Hub documentation to warn against public internet exposure

    Technical Analysis Update

    A documentation change merged on September 7 corrected Alby Hub setup guidance after several setup guides had described the server as running on localhost when it actually listens on all network interfaces. The same change switched the project's Docker file from publishing port 8080 to every address to publishing it only to the machine itself.

    Show sources
    Open in new tab
  3. 09.09.2026 13:43 1 articles · 2h ago

    Alby warns of an internet-exposed Alby Hub flaw that could let attackers take over wallets

    Initial Disclosure

    Alby warned that internet-exposed Alby Hub installations on v1.7.0 through v1.18.5 could let an attacker take over a wallet and send its funds, and said one user had been affected. Owners were told to stop outside access to the management interface, update to v1.24.0, and change the unlock password after updating if the Hub had been reachable from the internet.

    Show sources
    Open in new tab