LNbits, a free open-source Bitcoin Lightning wallet system, told every operator to shut down their servers after a wave of attacks, The Hacker News reports. Security fixes are coming; as of the article, no fixed release was out yet.
- An earlier, narrower warning asked operators to disable the Paywall extension while they investigated.
- One operator reported new accounts drained about 2,285,545 satoshis (~0.023 BTC) before he could stop it.
- LNbits also turned off its own hosted instances on my.lnbits.com. A developer estimated patches within 24–48 hours of the notice.
What to do
If you run LNbits, follow the project’s guidance: shut it down until a fixed release is out, then update before you bring anything back. Watch their channels for the all-clear. I’m not describing the exploit.
God Bless, and May the Source Be with You!