LNbits tells operators to shut down servers after wave of attacks
📋 Summary
LNbits has asked operators to shut down their servers immediately after detecting a wave of attacks. The team is preparing security patches, while the extent of the incident and the exploited vector have yet to be detailed.
On Sunday (8), LNbits recommended that all operators immediately shut down their servers following a wave of attacks against platform instances. The alert is aimed primarily at those hosting the software to create wallets and accounts on the Bitcoin Lightning Network.
The team said it needs to release several security patches and advised keeping services offline until the fixes are available. So far, the project has not published a technical report identifying the exploited vector, affected versions, or total funds compromised.
Alert affects operators hosting Lightning wallets
LNbits is an open-source system installed on top of a Lightning node. It allows a single infrastructure to provide multiple accounts, wallets, payment terminals, and integrations without requiring a separate channel for each user. As a result, a vulnerability in an instance can affect not only the administrator but also people and services holding balances in it.
The emergency notice was posted by the project's official account on X and reported by specialized news outlets. An operator identified as KevinR4 reported losing 2,285,545 satoshis in about five hours after attackers allegedly created accounts and made withdrawals. This figure refers to one instance's report and is not a consolidated estimate of the incident.
It is still unclear whether the attacks depend on a specific configuration, an extension, or a flaw in the software's core.
📋 Summary
LNbits has asked operators to shut down their servers immediately after detecting a wave of attacks. The team is preparing security patches, while the extent of the incident and the exploited vector have yet to be detailed.
On Sunday (8), LNbits recommended that all operators immediately shut down their servers following a wave of attacks against platform instances. The alert is aimed primarily at those hosting the software to create wallets and accounts on the Bitcoin Lightning Network.
The team said it needs to release several security patches and advised keeping services offline until the fixes are available. So far, the project has not published a technical report identifying the exploited vector, affected versions, or total funds compromised.
Alert affects operators hosting Lightning wallets
LNbits is an open-source system installed on top of a Lightning node. It allows a single infrastructure to provide multiple accounts, wallets, payment terminals, and integrations without requiring a separate channel for each user. As a result, a vulnerability in an instance can affect not only the administrator but also people and services holding balances in it.
The emergency notice was posted by the project's official account on X and reported by specialized news outlets. An operator identified as KevinR4 reported losing 2,285,545 satoshis in about five hours after attackers allegedly created accounts and made withdrawals. This figure refers to one instance's report and is not a consolidated estimate of the incident.
It is still unclear whether the attacks depend on a specific configuration, an extension, or a flaw in the software's core.