● Covered by 1 source · 1 reportMedium impact1 negative
LNbits Urges Operators to Shut Down Servers Due to Active Exploits
Key points
- LNbits advised all operators to shut down servers.
- Attacks exploited vulnerabilities in the system.
- One operator lost 0.023 BTC from their server.
- Security patches are expected within 24-48 hours.
Urgent Shutdown Advisory Issued
LNbits, the free and open-source Bitcoin Lightning wallet system, issued an urgent advisory yesterday, instructing all operators to shut down their servers. This directive came in response to a series of attacks exploiting vulnerabilities within the system. The project indicated that several security fixes are in development and urged caution until these patches are released.
Reported Exploits and Losses
One operator reported that new accounts used an exploit to withdraw 2,285,545 satoshis (approximately 0.023 bitcoin) from their server. This incident occurred before the general shutdown notice was disseminated. The attack on this specific server ran for several hours, starting before LNbits issued its initial, narrower warning about a potential bug in the Paywall add-on.
Response and Remediation Efforts
The shutdown notice was issued about 80 minutes after an initial warning that focused on disabling the Paywall add-on. As of 09:00 UTC today, a fixed version of LNbits had not been released. A developer stated that patches are expected to be merged and available within 24-48 hours from yesterday's estimate. LNbits also temporarily shut down all instances it runs for users on its cloud service, my.lnbits.com, with services expected to resume within 24 hours.
Impact on Users and Further Details
The operator who reported the loss has committed to repaying users of BitTipBot, a Telegram bot, whose funds are currently inaccessible. While the specific extension exploited has been confirmed by security testers, neither the project nor the affected operator had publicly named it as of 09:00 UTC today. The shutdown notice applies specifically to LNbits servers and does not extend to Lightning nodes or other wallet software.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
LNbits, an open-source Bitcoin Lightning wallet system, has advised all operators to shut down their servers following a wave of attacks. The project is preparing security fixes, with one operator reporting a loss of 0.023 bitcoin from an exploit before the shutdown notice was issued.