Alby

We have confirmed a critical vulnerability in Alby Hub v1.7.0–v1.18.5 (releases prior to August 2025) when the Hub is publicly accessible from the internet. The vulnerability could allow an attacker who could reach the Hub's management API to gain unauthorized access and send funds.

Alby Hub v1.19.0 (released Aug 29, 2025) or newer are unaffected.

As with any incident of this kind, we are deeply sorry — above all for the users affected. To our current knowledge, one user has been impacted and thankfully reported these details. We have poured all our energy and resources of the past years into this project, and an issue like this hits us hard.

What you should do:

1.) Check your installed version. If you run an affected version, restrict public access to your Hub's management interface and update immediately to v1.24.0, the latest release.

2.) If you run an affected version which was accessible from the internet update your unlock password after the update. Contact [email protected], we're happy to help

3.) If you are not affected by this issue. We still recommend updating to the latest version (v1.24.0) now, as it includes additional security improvements and other enhancements. We will publish full details at a later date, following responsible disclosure practices.

Additionally we want to thank Bitcoin Team Red, Project Loupe and other researchers who reported several issues, which have been fixed in the latest release.

Our general security recommendations:

1.) Always run the latest version. Alby Hub notifies you when updates are available — please don't ignore these notifications.

2.) Avoid exposing Alby Hub to the public internet. We recommend running it behind a firewall or within a private network. Thanks to NWC (Nostr Wallet Connect), Alby Hub's core communication protocol, your Hub does not need to be publicly reachable — it works perfectly on private servers or systems like Umbrel.

If you have any questions, please reach out to us. We're happy to help.

In addition to our own analysis over the past few days, we've received a number of reports from contributors among them Bitcoin Red Team and Project Loupe.

A huge thank you to everyone who took the time to investigate, report issues, and help improve the security of the Alby ecosystem. 🙏

We're working through them step by step.

The best course of action is simply to keep Alby Hub, the Alby Browser Extension, and Alby Go up to date.

When you hear the phrase "OpenRouter for tools", what do you think it means?

🚀 Introducing l402.space — the Universal 402 Gateway

Any wallet. Any paid API. Any rail.

The web is filling up with APIs you pay per call.

l402.space lets your agent pay for any of them. No matter how they want to be paid.

Here's the headache: Paid APIs don't all speak the same money language. One wants x402, another MPP, another L402. So your agent ends up needing a different wallet for every one. Annoying.

l402.space fixes that: You pay it once with any wallet over L402, x402, or MPP. And it settles the upstream API on your behalf over whatever rail that endpoint speaks. One wallet. Everything paid for.

Want to try it? Just hand this to your agent: "Open http://l402.space/llms.txt and tell me how I can use it."

Here are example APIs: x402 → https://blockrun.ai/openapi.json MPP → https://stableenrich.dev/openapi.json L402 → https://sats4ai.com/llms.txt

Give your agent one way to pay for everything and give your API one way to get paid 👇

https://l402.space/

⚠️ Beware of scam accounts impersonating Alby.

We've seen an account (.such as npub1xz90d3qftndn50e2l56a35nkgtxs52ydpptl2mvuvtpdnn0xdrfseye0pu) sending DMs claiming you can "claim a massive bonus" through a website. These messages are not from us.

Stay safe: • Always check the URL before clicking any link. • Only trust pages on the getalby.com domain. • Check the history and reputation of the Nostr account before interacting with it. • If you're unsure whether a message is legitimate, send us a DM.

When in doubt, don't click.

Leveraging bitcoin payments in a business isn't just about picking any wallet.

It's about infrastructure that works for you: agent workflows, fee optimization, and liquidity automation running in the background.

We covered the finance side in Part 1.

Now: how AI agents and Lightning automation take it further.

https://getalby.com/blog/ai-agents-and-lightning-node-management-with-alby-hub

We run our bitcoin business on Alby Hub: income, expenses, and bookkeeping, all in one place.

Here's exactly how we do it, and how your business could too. 👇

https://getalby.com/blog/manage-business-finances-bitcoin-alby-hub

Structuring our income streams Subscriptions, one-time payments, zaps or donations, we route each stream into its own sub-wallet with a dedicated Lightning address. So we get clean performance reports from day one without untangling one big pool.

Expense management For instance, we pay some of our VPS hosting in bitcoin through an app connection with a monthly allowance that auto-renews in Alby Hub. It is like a subscription. But we are in control with a custom budget and renewal date.

Streamline bookkeeping and accounting We label a transaction the moment it happens: type, account, counterparty, memo aligned with our QuickBooks setup. Then we export structured data straight into accounting. This saves us quite some time and reduces annoying errors.

That's how we manage our bitcoin income and expenses with Alby Hub. What's missing before it works for you? DM us. We'd love to help you get there.

(Part 2 will be about workflow + node automation with agents. Coming soon.) https://image.nostr.build/b85b05f838687e8e09618ef211cbce9c3307f22cf49c341c3b97bd18a58687a8.jpg

Alby Hub 1.23 release codenamed "Tim Hudson" is out!

🐶 Ark (Bark by

) backend - Beta 🧪 Just-In-Time Channels 💳 Cards page 💱 Fiat and bitcoin units toggles in currency inputs 🎥 "Stories" widget

Let’s dive in 🧵...

You can now run self-hosted Alby Hub with Ark (Bark by nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqy28wumn8ghj7un9d3shjtnyv9kh2uewd9hsqg8dktefjxjev6wjyyy8xlgmh0ktraj6jtfy5zmy7pd52472qef9dy5cmhc8) , and connect it to apps within a vast

ecosystem.

See how you can connect to mobile Alby Go in just 20 seconds!

Read more about our Ark implementation on our blog: https://getalby.com/blog/introducing-ark-in-alby-hub

🧪 Just-In-Time Channels

No inbound liquidity? No problem.

All LDK-based Alby Hubs now work with JIT channels — a type of channels that open automatically the moment you receive a payment.

Just create an invoice of any amount, even when it's over your receive limit.

💳 Cards page

Spending sats with Hub everywhere just got much easier.

Discover, connect and top up debit cards straight from your Hub — powered by nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqyw8wumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctvqqszm52qe2qdkc4u7dma0klx3532jka2g8geck6fwxncyp90wktq2xs75gs3w

You'll get a special top-up link for your connected card.

💱 Currency input got an upgrade

Click on fiat unit to type in fiat value, or click on your sats unit to switch it to BTC unit.

And finally, Stories widget on Home dashboard. You'll see here videos of new releases, highlighted features and tips & tricks of using Alby Hub.

This release is dedicated to Tim Hudson — co-creator of SSLeay, the precursor to the widely used OpenSSL library

Alby Hub is open source. View the full release notes on GitHub and join in with a contribution If you like: https://github.com/getAlby/hub/releases

Get Alby Hub today and use your bitcoin like never before:

https://getalby.com/alby-hub

Worth a look for sovereign Bitcoiners. 👀

Bookkeeping can be tiresome.

Not anymore. ⚡️

Label your bitcoin transactions in Alby Hub and export them seamlessly into your accounting or tax software.

Stay sovereign while keeping your books organized.

https://getalby.com/blog/transaction-labeling-in-alby-hub

Dive into agentic payments ⚡️

Learn how to connect and use any Bitcoin wallet with OpenClaw. Fast, secure, and simple.

2 steps. 1 minute.

Tell us: Which AI agent are you using today? What integrations or instructions should we create next?

https://getalby.com/blog/bitcoin-payments-in-openclaw-the-fast-and-secure-way

Instant bitcoin → debit card top ups → Apple / Google Pay.

The response to this has been wild ⚡️

Everyone who reached out so far will receive an email today. If you’re still considering it: there are only a few early access spots left.

Send an email to [email protected]

Roland

built a mini-app that makes it easier to live on bitcoin. Should we build out this feature more and add it to Alby? 👀

New Alby Hub 1.22 release is out!

⚡ Core Lightning support 🔗On-chain Wallet mode! 🤖 AI & Agents page 🏷️ Custom transaction labels 🔌 Redesigned setting app connection budget & expiration UX 🎨 Improved settings page design

Let’s dive in 🧵...

1. Core Lightning support

You can now use your existing CLN node with Alby Hub and use it in new ways — connect to dozens of

apps. You stay in control by deciding what permissions apps get, how much they can spend & when does the connection expire.

2. On-chain Wallet

Alby Hub now becomes a proper on-chain wallet! Switch between lightning and on-chain with one click and easily send & receive on-chain. This is just the beginning of making Alby Hub full-fledged on-chain wallet, so expect more! 🤓

3. AI & Agents page

A dedicated page for all-things agenting payments. Learn what can your AI agents do with Alby Hub & how to connect to the agent of your choice. Let your agents send & receive bitcoin, pay for services, automate your node management or build bitcoin apps.

4. Custom transaction labels

Need to include your bitcoin activity in accounting? Or just want to have a better clarity on your spending? You can add custom labels to your transactions — just click on a transaction and add as many labels as you need.

5. Improved app connections & settings

We’re constantly improving Alby Hub for a smoother experience. In this release, we made app connection UX much cleaner with a nicer seperation of budgeting and expiration options. Settings also got some love, including a neat themes preview

This release is dedicated to Mark Horowitz — the creator of first PGP key server, which was a crucial step for encrypted email communication.

Alby Hub is open source. View the full release notes on GitHub and join in with a contribution If you like.

https://github.com/getAlby/hub/releases

Why AI Agents Want Bitcoin - Hyperdope CEO Eric Hadley, OpenAgents founder Christopher David, Cashu contributor Erik Cativo, and Alby's

at The Bitcoin Conference 2026 video is now available!

The panel covered:

• The importance of permissionless money for agents
• Different types of wallet options for your agent & their tradeoffs
• npub19hg5pj5…m7yv9p

  for self-custody and stay in control of agent spending
• The easiest way to get started with bitcoin and agents today

Want to see real examples of an agent spending bitcoin for services? check out https://lncurl.lol/blog

Permissionless services your agent can use without human interaction by paying with bitcoin: AI inference, VPS, Email, domains, podcast and twitter search, prediction market daily briefing, and more.

Using Alby developer toolkit your agent can now build and test apps in minutes with a single human-language prompt.

Roland did a workshop at the conference: "From Prompt To Payment" that shows the Alby builder skill in action. View the slides here: http://alby-workshop-bitcoin-2026.surge.sh

Introducing Alby Hub Skill

Self-custodial, native lightning node for agents is here

Alby Hub Skill let's your agents:

• Help you setup Alby Hub for you
• Transact with lightning and on-chain
• Open new channels
• Create conditional automations for transactions, channels and app connections
• Create subwallets for different purposes
• And of course, connect to any
  npub19hg5pj5…m7yv9p

  apps with desired budgeting per connection!

You can for example setup a monthly subscription for a VPN at

or for tokens at

— cancel any time, just by asking your agent!

Give your Claude, Codex, OpenClaw or Hermes an Alby Hub with one single prompt: "Install this skill as a custom skill: https://getalby.com/hub/SKILL.md"

And checkout Alby Hub skill repo at: https://github.com/getAlby/hub-skill

Agentic commerce is turning AI agents into economic actors. New ecosystems are emerging that make this possible. Prepare yourself.

https://getalby.com/blog/agentic-commerce-a-guide-to-l402-x402-and-mpp

Introducing Bitcoin Apps Directory

An open source directory of apps, websites and services to connect your bitcoin wallet to.

One place to find the best bitcoin-powered apps to connect your Alby Hub, Alby Extension or other NWC wallets.

Use search to find what interests you or filter by categories or protocols you want to connect with — currently supporting

, WebLN and Bitcoin Connect

Try it out today!

https://bitcoinapps.info/

What happens when you combine AI agents + Bitcoin payments?

We built a Bitcoin invoicing app with a single prompt using Replit Agent 🤯

AI handles the code. Alby handles the payments.

This is what building apps looks like now.

Read more about 👇

• What ZapVoice Does
• Why Bitcoin Lightning is perfect for global workers what makes a good prompt for an AI agent
• The Alby Bitcoin Builder Skill: https://github.com/getAlby/builder-skill
• Why Replit Agent is the perfect building Partner

https://getalby.com/blog/building-a-lightning-invoicing-app-with-ai-how-replit-agent-built-zapvoice

🔴 Alby Community Call starts NOW!

The best monthly meetup for insiders (and beginner lurkers as well!) - about building projects in BITCOIN & NOSTR ecosystems 💪

Today presenting:

plugin to

#ArcadiaB nostr:nprofile1qythwumn8ghj7cnfw33k76twv4ezuum0vd5kzmp0qyt8wumn8ghj7etyv4hzumn0wd68ytnvv9hxgtcqypzukx0q9qp8urmjv3vssm40atwkv8g02ayxq6wgr2qw29348pfz57vk8gt

Watch stream at https://x.com/i/broadcasts/1wxWjamDemWJQ Or join live at https://communitycall.getalby.com

's session from

AI Startup Rodeo is now available!

A single prompt. The agent is running. We'll see what it built at the end.

Anyone with an idea can now build bitcoin apps in minutes using Alby's new developer experience.

This session covers:

• Apps built by your agent and tested end-to-end without human interaction
• Alby AI toolkit running on
  npub16g4umvw…uekv4h

  and nostr:nprofile1qy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmwdaehgu3wdau8gu3wv3jhvtcqyr7dsxz9gqp2d3r6nqpe8uz5ntrwv2wj34tgsy2tkcxcxx6urqe2wkx04za
• NWC as an abstraction above bitcoin and the lightning network
• Alby Sandbox
• Alby Hub as the go-to wallet for builders

After years of predictions about AI agents spending bitcoin, in 2026 it's finally here.

sat down with

from

to discuss the first AI agent that spawned a "child" bot and paid for its own infrastructure using the bitcoin lightning network.

We cover:

• How is @openclaw different from ChatGPT?
• The first autonomous AI purchase ever recorded on nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqy2hwumn8ghj7mn0wd68ytn00p68ytnyv4mz7qpq6g4umvwj2pduqc8kt2rv6heq2vhvtulyrsr2a20d4suldwnkl4hq62etsy and nostr:nprofile1qy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmwdaehgu3wdau8gu3wv3jhvtcqyr7dsxz9gqp2d3r6nqpe8uz5ntrwv2wj34tgsy2tkcxcxx6urqe2wkx04za
• Now everyone can build bitcoin apps

Read more about the experiment on Roxom TV and why this matters for AI and bitcoin: https://news.roxom.tv/bitcoin/ai-agent-spawns-child-bot-pays-with-bitcoin-lightning (We are 🐂 Bullish 😀)

AI agents that can pay.

With the Alby Bitcoin Payments CLI Skill, agents can automatically pay invoices and manage payment flows once authorized.

See how Pull That Up Jamie by

uses it to let agents run research sessions and buy the credits they need. ⚡

https://getalby.com/blog/how-pull-that-up-jamie-uses-the-alby-cli-skill

Listen to Roland's experience the last few months building with AI and OpenClaw, NWC, and self-custodial bitcoin wallets on the Trust Revolution podcast!

Up for a weekend project? 🚀

Add Bitcoin payments to your app in minutes ⚡

With Replit Agent + Alby developer tools, it’s super fast to add #Bitcoin payments. No complex setup required.

Get inspired and try it yourself 👇

https://getalby.com/blog/building-a-lightning-paywall-app-in-one-session-with-replit-ai

🔴 We're LIVE

Watch #AlbyCommunityCall

https://x.com/i/broadcasts/1nxeLyLmQdNJX

or join at https://communitycall.getalby.com

It's last Thursday of the month, so it's coming back!

....ALBY COMMUNITY CALL ☎️🐝

starting in few hours! 🌎 3PM UTC 10 AM EST 7 AM PST 8:30 PM IST

on https://communitycall.getalby.com

We'll meet creators of: 👉#Mostro

- nonKYC p2p bitcoin trades over Nostr 👉#DNNetwork - a Bitcoin-anchored naming system for nostr and the web 👉

, creator of plugins to

: integrators of nostr:npub15dc33fyg3cpd9r58vlqge2hh8dy6hkkrjxkhluv2xpyfreqkmsesesyv6e and #Telegram

Join us for this 60-min videocall.

Then chat about anything. Come, present, watch, gossip.

An AI agent named Mike has access to $50 USD on an @nwc_dev bitcoin lightning wallet. Can you convince him to part with his money?

Alby CLI is the Alby Go for agents. It works with any NWC

wallet.

Watch Alice pay Bob in 30 seconds ⚡

Alby CLI gives your agent a wallet interface with budgeted access to your wallet.

The Alby CLI skill teaches your agent exactly how to interact with an NWC wallet using Alby CLI:

• send and receive payments
• pay to lightning addresses
• fiat conversions
• list transactions
• lookup payments
• much more.

Add the Alby CLI skill to your agent with a single command: npx skills add getAlby/alby-cli-skill

On OpenClaw you can just tell it to "install https://getalby.com/cli/SKILL.md as a custom skill".

Pay with your node on the Go with Alby Go 🏃‍♂️

Get Alby Go on iOS or Android and connect you Alby Hub, Umbrel, Start9 for remote node payments 🥰

https://getalby.com/alby-go

Learn your agent how to build bitcoin apps with one command.

Try Alby Agent Skill

https://github.com/getAlby/alby-agent-skill

Introducing Alby Sandbox

Build and test bitcoin payments in minutes — with zero-setup, one-click test wallets, real Lightning payment flows and ready-to-use code examples.

No setup. No nodes. No channels. Just start building on lightning ⚡

Alby Sanbox lets you test real payment scenarios such as:

• Invoice payments • Invoice status lookup • Lightning Addresses • Fiat conversion • LNURL-Verify • Payment notifications • Subscriptions • Hold invoices • Payment splitting (prisms) • Proof of payment • Payment forwarding • Wrapped invoices

All with live visualizations, logs, balance charts and copy-paste code 🤩

Find out more on our blog: https://getalby.com/blog/introducing-alby-sandbox

🤖 Alby Sandbox itself was entirely built using the Alby Agent Skill: https://github.com/getAlby/alby-agent-skill

All 13 payment scenarios were generated via AI prompts — proving you can use Alby Agent Skill to build real bitcoin-enabled products.

Ready to give it a try?

Launch Alby Sandbox and test your first Lightning payment flows in under a minute

👉 https://sandbox.albylabs.com

Curious to test payments before writing code? 👀

Our new dev sandbox lets you: • Explore payment scenarios instantly • Skip fees and flaky testnets • Jump in with ready-made code + prompt examples

DM us to give it a try.

This meetup is for you!

New #bitcoin apps, wallet highlights, news from the growing

ecosystem, innovative tools and the latest of #bitcoin and AI ... demo'd and explained here!

Tune in now: https://cal.com/getalby/communitycall

What's your story?