Vulnerability Found in Alby Hub Older Versions May Lead to Fund Transfers

Alby has confirmed a critical vulnerability in Alby Hub versions 1.7.0 to 1.18.5. If the management API is exposed to the public internet, attackers may gain unauthorized access and transfer funds. Currently, one user is known to be affected. Versions 1.19.0 and above of Alby Hub are not affected. Alby recommends that affected users restrict public access to the management interface, immediately update to version 1.24.0, and change their unlock password after the update. Multiple issues reported by Bitcoin Team Red, Project Loupe, and other researchers have also been fixed in the latest version.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.