Bitcoin Magazine reports that LNbits released version 1.7.0 after attacks began on November 8. Operators were advised to update their servers before restarting them; versions below 1.7.0 are at risk.
BitTipBot operator reported that 2 285 545 satoshis, or approximately 0.0229 BTC, were withdrawn from its instance. LNbits advises deploying a new server and changing wallet keys, funding source credentials and other secrets if a compromise is suspected.