In addition to our own analysis over the past few days, we've received a number of reports from contributors among them Bitcoin Red Team and Project Loupe.

A huge thank you to everyone who took the time to investigate, report issues, and help improve the security of the Alby ecosystem. 🙏

We're working through them step by step.

The best course of action is simply to keep Alby Hub, the Alby Browser Extension, and Alby Go up to date.

🚀 Introducing l402.space — the Universal 402 Gateway

Any wallet. Any paid API. Any rail.

The web is filling up with APIs you pay per call.

l402.space lets your agent pay for any of them. No matter how they want to be paid.

Here's the headache:
Paid APIs don't all speak the same money language. One wants x402, another MPP, another L402.
So your agent ends up needing a different wallet for every one. Annoying.

l402.space fixes that:
You pay it once with any wallet over L402, x402, or MPP. And it settles the upstream API on your behalf over whatever rail that endpoint speaks.
One wallet. Everything paid for.

Want to try it? Just hand this to your agent:
"Open http://l402.space/llms.txt and tell me how I can use it."

Here are example APIs:
x402 → https://blockrun.ai/openapi.json
MPP → https://stableenrich.dev/openapi.json
L402 → https://sats4ai.com/llms.txt

Give your agent one way to pay for everything and give your API one way to get paid
👇
https://l402.space/

⚠️ Beware of scam accounts impersonating Alby.

We've seen an account (.such as @Alby) sending DMs claiming you can "claim a massive bonus" through a website. These messages are not from us.

Stay safe:
• Always check the URL before clicking any link.
• Only trust pages on the getalby.com domain.
• Check the history and reputation of the Nostr account before interacting with it.
• If you're unsure whether a message is legitimate, send us a DM.

When in doubt, don't click.