LNbits, an open-source platform for Lightning wallets and payment apps, told all server operators to stop their servers on Nov. 8 after what it called a wave of attacks. One operator reported losing about 2.29 million satoshis, and the project said patches are still pending.
LNbits told operators to stop their servers immediately on Nov. 8, citing a wave of attacks and security patches it had yet to push. The project posted on X at 8:56 a.m. ET on Sunday: "All LNbits users should stop their LNbits servers IMMEDIATELY."
The platform lets operators build wallets and payment applications on a connected funding source such as LND or Core Lightning. The instruction targeted LNbits servers, not every node on the Lightning Network.
Hosted service goes offline
LNbits also disabled all instances on its managed hosting service, my.lnbits.com, as a precaution, and said services would resume within 24 hours. Contributor Ben Arc said patches should be merged and available within 24 to 48 hours.
The shutdown followed an earlier warning. LNbits had first asked operators to disable the Paywall extension while developers investigated a potential vulnerability. The later notice covered all servers, not only those running that extension.
Operator reports withdrawals
Operator Kevin Ravensberg said newly created accounts withdrew about 2.29 million satoshis from his LNbits instance before he could stop the server. He pledged to make BitTipBot users whole, but said they cannot access funds until LNbits patches the vulnerabilities.
The notice did not identify vulnerable versions, explain the attack route or state a total loss amount. As of publication, the GitHub releases page still listed v1.6.2, released Sept. 18, as the latest release.
Sources: The Defiant, Bitcoin News
Trading involves risk.
Risk Disclaimer
