According to Bitcoin News, following multiple attacks, LNbits urged all users to take their servers offline immediately and keep them offline until the critical vulnerability is fixed. One operator reported that attackers created new accounts and withdrew 2,285,545 sats in about five hours. The operator promised to compensate affected BitTipBot users, but said the funds are currently inaccessible while they await a fix. LNbits said it expects to release a patch within 24 to 48 hours.