We have confirmed a critical vulnerability in Alby Hub v1.7.0–v1.18.5 (releases prior to August 2025) when the Hub is publicly accessible from the internet. The vulnerability could allow an attacker who could reach the Hub's management API to gain unauthorized access and send funds. **Alby Hub v1.19.0 (released Aug 29, 2025) or newer are unaffected.** As with any incident of this kind, we are deeply sorry — above all for the users affected. To our current knowledge, one user has been impacted and thankfully reported these details. We have poured all our energy and resources of the past years into this project, and an issue like this hits us hard. **What you should do:** 1.) Check your installed version. If you run an affected version, restrict public access to your Hub's management interface and update immediately to v1.24.0, the latest release. 2.) If you run an affected version which was accessible from the internet update your unlock password after the update. Contact security@getalby.com, we're happy to help 3.) If you are not affected by this issue. We still recommend updating to the latest version (v1.24.0) now, as it includes additional security improvements and other enhancements. We will publish full details at a later date, following responsible disclosure practices. Additionally we want to thank Bitcoin Team Red, Project Loupe and other researchers who reported several issues, which have been fixed in the latest release. **Our general security recommendations:** 1.) Always run the latest version. Alby Hub notifies you when updates are available — please don't ignore these notifications. 2.) Avoid exposing Alby Hub to the public internet. We recommend running it behind a firewall or within a private network. Thanks to NWC (Nostr Wallet Connect), Alby Hub's core communication protocol, your Hub does not need to be publicly reachable — it works perfectly on private servers or systems like Umbrel. If you have any questions, please reach out to us. We're happy to help.

🚀 Introducing l402.space — the Universal 402 Gateway Any wallet. Any paid API. Any rail. The web is filling up with APIs you pay per call. l402.space lets your agent pay for any of them. No matter how they want to be paid. Here's the headache: Paid APIs don't all speak the same money language. One wants x402, another MPP, another L402. So your agent ends up needing a different wallet for every one. Annoying. l402.space fixes that: You pay it once with any wallet over L402, x402, or MPP. And it settles the upstream API on your behalf over whatever rail that endpoint speaks. One wallet. Everything paid for. Want to try it? Just hand this to your agent: "Open http://l402.space/llms.txt and tell me how I can use it." Here are example APIs: x402 → https://blockrun.ai/openapi.json MPP → https://stableenrich.dev/openapi.json L402 → https://sats4ai.com/llms.txt Give your agent one way to pay for everything and give your API one way to get paid 👇

l402.space — Universal 402 Gateway

Any wallet. Any paid API. Any rail. l402.space is a payment gateway that lets you pay for any 402-gated API with any agentic wallet — over L402, ...

Leveraging bitcoin payments in a business isn't just about picking any wallet. It's about infrastructure that works for you: agent workflows, fee optimization, and liquidity automation running in the background. We covered the finance side in Part 1. Now: how AI agents and Lightning automation take it further.

How Alby Uses Alby Hub to Power AI Agents and Automate Lightning Node Management (Part 2)

How Alby manages AI agent payments and automates Lightning node management with Alby Hub — auto swaps, multiple LSPs, and fee optimization.

Introducing Bitcoin Apps Directory An open source directory of apps, websites and services to connect your bitcoin wallet to. One place to find the best bitcoin-powered apps to connect your Alby Hub, Alby Extension or other NWC wallets. Use search to find what interests you or filter by categories or protocols you want to connect with — currently supporting @npub19hg5...yv9p, WebLN and Bitcoin Connect Try it out today!

Bitcoin Apps Directory for Lightning Wallets

A collection of apps, websites and services to connect your bitcoin wallet to.

After years of predictions about AI agents spending bitcoin, in 2026 it's finally here. @npub1zk6u...l6ef sat down with @Sherry from @Roxom TV to discuss the first AI agent that spawned a "child" bot and paid for its own infrastructure using the bitcoin lightning network. We cover: - How is @openclaw different from ChatGPT? - The first autonomous AI purchase ever recorded on @npub16g4u...kv4h and @npub1lnvp...7vjj - Now everyone can build bitcoin apps Read more about the experiment on Roxom TV and why this matters for AI and bitcoin:

News | RoxomTV - Bitcoin & World News

Breaking news and in-depth analysis on Bitcoin, finance, global economics, politics, war, technology, and freedom.

(We are 🐂 Bullish 😀)

Alby CLI is the Alby Go for agents. It works with any NWC @npub19hg5...yv9p wallet. Watch Alice pay Bob in 30 seconds ⚡ Alby CLI gives your agent a wallet interface with budgeted access to your wallet. The Alby CLI skill teaches your agent exactly how to interact with an NWC wallet using Alby CLI: - send and receive payments - pay to lightning addresses - fiat conversions - list transactions - lookup payments - much more. Add the Alby CLI skill to your agent with a single command: `npx skills add getAlby/alby-cli-skill` On OpenClaw you can just tell it to "install https://getalby.com/cli/SKILL.md as a custom skill".

Learn your agent how to build bitcoin apps with one command. Try Alby Agent Skill

GitHub

GitHub - getAlby/builder-skill: Add capabilities to send and receive bitcoin payments to your apps with your favorite agent.

Add capabilities to send and receive bitcoin payments to your apps with your favorite agent. - getAlby/builder-skill

Curious to test payments before writing code? 👀 Our new dev sandbox lets you: • Explore payment scenarios instantly • Skip fees and flaky testnets • Jump in with ready-made code + prompt examples DM us to give it a try.

Trustless auctions on #Bitcoin are here! ⚡️ Satoshi’s Auction House lets you sell goods and get paid without ever taking custody of user funds. To celebrate, we’re auctioning a 1-year Alby Hub Cloud subscription incl. a Lightning channel. Bid now and get a Xmas present! 🎁👇 https://satoshisauction.house/listings/033973b6-b06e-4090-811d-5d28ca62113d ---------------- Satoshi’s Auction House uses HOLD invoices to enable conditional payment logic and trust-minimized escrow all built directly on Bitcoin. Learn how it works. 👇

Build Conditional Payment Logic Into Your App

"Hold invoices" let you build conditional payment logic and trust minimized escrow services right into your app on top of bitcoin. Learn how.

---------------- The app removes trust in the buyer and uses #Nostr for accounts, adding transparency for the seller. And instead of seeing the HOLD-invoice timeout as a limitation, it embraces the fun: fast bidding — just like a real-world auction. Perfect for livestreams, conferences, meetups and more. ---------------- The winner will be announced at the end of our Community Call, 3–4 PM CET. Join and listen in:

Cal.com

Alby Community Call 🐝📞 | Alby | Cal.com

Alby Community Call 🐝📞

🚀 New Alby Hub Release — v1.12 is here! What’s new? 🟠 BIP177 support 🎨 New logo & updated branding 📡 Multiple relays support 🧹 Many minor fixes & improvements Available now for Alby Cloud subscribers and soon to Umbrel and Start9 runners 🟠 Embrace the ₿ with BIP177 support in Alby Hub. Still prefer "sats"? No worries, you can easily switch back in your Hub settings 📡 Alby Hub now supports multi-relay NWC connections! This will add redundancy to your connections and allows for your Hub to perform payments through any connected app, even If main NWC relay is currently offline. 📝 Full release changelog, as always, on our GitHub 👉

GitHub

Release v1.21.0 Satoshi Nakamoto · getAlby/hub

In this release Alby Hub is updated to Alby's new branding! other changes include a simpler swaps and on-chain receive UX, multiple relay support, ...

🐝 Wanna use bitcoin, self-custodially, in multiple apps and everywhere you go? Subscribe to Alby Cloud or self-host Alby Hub and use bitcoin like never before:

Alby — Bitcoin Lightning Wallets & Tools

Alby offers open-source wallets and tools for using Bitcoin as everyday money online, in apps, and in person. Try Alby Cloud or self-host Alby Hub.

🔴 LIVE! #ZapStream still doesn't work for us, so if you want to join the stream, watch us on X: https://x.com/i/broadcasts/1eaJbjYdOLRJX?s=20 Or simply join Jitsi call: https://communitycall.getalby.com

The most comprehensive ecosystem for self-custodial lightning. 🔌 Run Alby Hub and connect it to apps. 🌐 Get Alby Extension to use your Hub on the web. 🚶‍♂️‍ Get Alby Go to pay with your Hub on the go.

Overnight we have received notices of some unusual requests to our infrastructure. Over a short period of time many password reset emails had been requested from various residential proxies around the world. Our rate limiting protects against spamming attacks but requests got through to request password reset emails. Many of the requests are likely for emails that had been included in some data breach or have been publicly exposed by their owner. Password request emails also have been requested for lightning addresses which falsely exposed the user's email address. This had been a feature deployed to help users keep easy access to their accounts. But as many users post their lightning address on profiles like nostr this should not be exposed and a fix has been deployed immediately. Generally there should be no way to display a user's email address. We have failed here. About 5500 password reset emails had been requested by the attacker. **We have not seen any abnormal related login activity and accounts are safe. People who got a password reset email can ignore the email.** As we have seen a general increase in attacks on user accounts trying to brute force logins with some emails from some data leaks we have fully disabled password logins and require all users to login with the one time token. This adds an another layer of security. Additionally we also offer the option to login with Google. If you have questions or feedback, please let us know: support.getalby.com

A short blogpost about our recent rebranding

Introducing New Alby Brand Identity

We’re excited to unveil a refreshed look that better reflects who we are today and where we’re heading.