We have confirmed a critical vulnerability in Alby Hub v1.7.0βv1.18.5 (releases prior to August 2025) when the Hub is publicly accessible from the internet. The vulnerability could allow an attacker who could reach the Hub's management API to gain unauthorized access and send funds.
**Alby Hub v1.19.0 (released Aug 29, 2025) or newer are unaffected.**
As with any incident of this kind, we are deeply sorry β above all for the users affected. To our current knowledge, one user has been impacted and thankfully reported these details. We have poured all our energy and resources of the past years into this project, and an issue like this hits us hard.
**What you should do:**
1.) Check your installed version. If you run an affected version, restrict public access to your Hub's management interface and update immediately to v1.24.0, the latest release.
2.) If you run an affected version which was accessible from the internet update your unlock password after the update. Contact security@getalby.com, we're happy to help
3.) If you are not affected by this issue. We still recommend updating to the latest version (v1.24.0) now, as it includes additional security improvements and other enhancements.
We will publish full details at a later date, following responsible disclosure practices.
Additionally we want to thank Bitcoin Team Red, Project Loupe and other researchers who reported several issues, which have been fixed in the latest release.
**Our general security recommendations:**
1.) Always run the latest version. Alby Hub notifies you when updates are available β please don't ignore these notifications.
2.) Avoid exposing Alby Hub to the public internet. We recommend running it behind a firewall or within a private network. Thanks to NWC (Nostr Wallet Connect), Alby Hub's core communication protocol, your Hub does not need to be publicly reachable β it works perfectly on private servers or systems like Umbrel.
If you have any questions, please reach out to us. We're happy to help.
Alby
hello@getalby.com
npub1geta...0nfm
All you need to use bitcoin as everyday money online, in apps and in person. Open source, self-custodial and innovative.
π’ Blog: https://blog.getalby.com
π₯ Community: https://discord.getalby.com
π¬ Feedback: https://feedback.getalby.com
π€ Support: https://support.getalby.com
π οΈ Code: https://github.com/getAlby/
#decentralization #sovereignty #openness
π Introducing l402.space β the Universal 402 Gateway
Any wallet. Any paid API. Any rail.
The web is filling up with APIs you pay per call.
l402.space lets your agent pay for any of them. No matter how they want to be paid.
Here's the headache:
Paid APIs don't all speak the same money language. One wants x402, another MPP, another L402.
So your agent ends up needing a different wallet for every one. Annoying.
l402.space fixes that:
You pay it once with any wallet over L402, x402, or MPP. And it settles the upstream API on your behalf over whatever rail that endpoint speaks.
One wallet. Everything paid for.
Want to try it? Just hand this to your agent:
"Open http://l402.space/llms.txt and tell me how I can use it."
Here are example APIs:
x402 β https://blockrun.ai/openapi.json
MPP β https://stableenrich.dev/openapi.json
L402 β https://sats4ai.com/llms.txt
Give your agent one way to pay for everything and give your API one way to get paid
π
l402.space β Universal 402 Gateway
Any wallet. Any paid API. Any rail. l402.space is a payment gateway that lets you pay for any 402-gated API with any agentic wallet β over L402, ...
Leveraging bitcoin payments in a business isn't just about picking any wallet.
It's about infrastructure that works for you: agent workflows, fee optimization, and liquidity automation running in the background.
We covered the finance side in Part 1.
Now: how AI agents and Lightning automation take it further.


How Alby Uses Alby Hub to Power AI Agents and Automate Lightning Node Management (Part 2)
How Alby manages AI agent payments and automates Lightning node management with Alby Hub β auto swaps, multiple LSPs, and fee optimization.
Introducing Bitcoin Apps Directory
An open source directory of apps, websites and services to connect your bitcoin wallet to.
One place to find the best bitcoin-powered apps to connect your Alby Hub, Alby Extension or other NWC wallets.
Use search to find what interests you or filter by categories or protocols you want to connect with β currently supporting @npub19hg5...yv9p, WebLN and Bitcoin Connect
Try it out today!

One place to find the best bitcoin-powered apps to connect your Alby Hub, Alby Extension or other NWC wallets.
Use search to find what interests you or filter by categories or protocols you want to connect with β currently supporting @npub19hg5...yv9p, WebLN and Bitcoin Connect
Try it out today!
Bitcoin Apps Directory for Lightning Wallets
A collection of apps, websites and services to connect your bitcoin wallet to.
After years of predictions about AI agents spending bitcoin, in 2026 it's finally here.
@Roland sat down with @Sherry from @Roxom TV to discuss the first AI agent that spawned a "child" bot and paid for its own infrastructure using the bitcoin lightning network.
We cover:
- How is @openclaw different from ChatGPT?
- The first autonomous AI purchase ever recorded on @PayPerQ and @npub1lnvp...7vjj
- Now everyone can build bitcoin apps
Read more about the experiment on Roxom TV and why this matters for AI and bitcoin: (We are π Bullish π)
News | RoxomTV - Bitcoin & World News
Breaking news and in-depth analysis on Bitcoin, finance, global economics, politics, war, technology, and freedom.
Alby CLI is the Alby Go for agents. It works with any NWC @npub19hg5...yv9p wallet.
Watch Alice pay Bob in 30 seconds β‘
Alby CLI gives your agent a wallet interface with budgeted access to your wallet.
The Alby CLI skill teaches your agent exactly how to interact with an NWC wallet using Alby CLI:
- send and receive payments
- pay to lightning addresses
- fiat conversions
- list transactions
- lookup payments
- much more.
Add the Alby CLI skill to your agent with a single command: `npx skills add getAlby/alby-cli-skill`
On OpenClaw you can just tell it to "install https://getalby.com/cli/SKILL.md as a custom skill".Learn your agent how to build bitcoin apps with one command.
Try Alby Agent Skill

GitHub
GitHub - getAlby/builder-skill: Add capabilities to send and receive bitcoin payments to your apps with your favorite agent.
Add capabilities to send and receive bitcoin payments to your apps with your favorite agent. - getAlby/builder-skill
Curious to test payments before writing code? π
Our new dev sandbox lets you:
β’ Explore payment scenarios instantly
β’ Skip fees and flaky testnets
β’ Jump in with ready-made code + prompt examples
DM us to give it a try.
Trustless auctions on #Bitcoin are here! β‘οΈ
Satoshiβs Auction House lets you sell goods and get paid without ever taking custody of user funds.
To celebrate, weβre auctioning a 1-year Alby Hub Cloud subscription incl. a Lightning channel.
Bid now and get a Xmas present! ππ
https://satoshisauction.house/listings/033973b6-b06e-4090-811d-5d28ca62113d
----------------
Satoshiβs Auction House uses HOLD invoices to enable conditional payment logic and trust-minimized escrow all built directly on Bitcoin.
Learn how it works. π
----------------
The app removes trust in the buyer and uses #Nostr for accounts, adding transparency for the seller.
And instead of seeing the HOLD-invoice timeout as a limitation, it embraces the fun: fast bidding β just like a real-world auction.
Perfect for livestreams, conferences, meetups and more.
----------------
The winner will be announced at the end of our Community Call, 3β4 PM CET.
Join and listen in:


Build Conditional Payment Logic Into Your App
"Hold invoices" let you build conditional payment logic and trust minimized escrow services right into your app on top of bitcoin. Learn how.
Cal.com
Alby Community Call ππ | Alby | Cal.com
Alby Community Call ππ
π New Alby Hub Release β v1.12 is here!
Whatβs new?
π BIP177 support
π¨ New logo & updated branding
π‘ Multiple relays support
π§Ή Many minor fixes & improvements
Available now for Alby Cloud subscribers and soon to Umbrel and Start9 runners
π Embrace the βΏ with BIP177 support in Alby Hub.
Still prefer "sats"? No worries, you can easily switch back in your Hub settings
π‘ Alby Hub now supports multi-relay NWC connections!
This will add redundancy to your connections and allows for your Hub to perform payments through any connected app, even If main NWC relay is currently offline.
π Full release changelog, as always, on our GitHub π
π Wanna use bitcoin, self-custodially, in multiple apps and everywhere you go?
Subscribe to Alby Cloud or self-host Alby Hub and use bitcoin like never before: 
π Embrace the βΏ with BIP177 support in Alby Hub.
Still prefer "sats"? No worries, you can easily switch back in your Hub settings

π Full release changelog, as always, on our GitHub π GitHub
Release v1.21.0 Satoshi Nakamoto Β· getAlby/hub
In this release Alby Hub is updated to Alby's new branding! other changes include a simpler swaps and on-chain receive UX, multiple relay support, ...

Alby β Bitcoin Lightning Wallets & Tools
Alby offers open-source wallets and tools for using Bitcoin as everyday money online, in apps, and in person. Try Alby Cloud or self-host Alby Hub.
π΄ LIVE!
#ZapStream still doesn't work for us, so if you want to join the stream, watch us on X:
https://x.com/i/broadcasts/1eaJbjYdOLRJX?s=20
Or simply join Jitsi call:
https://communitycall.getalby.com
The most comprehensive ecosystem for self-custodial lightning.
π Run Alby Hub and connect it to apps.
π Get Alby Extension to use your Hub on the web.
πΆββοΈβ Get Alby Go to pay with your Hub on the go.

