LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
LNbits, a free open-source Bitcoin Lightning wallet system, has urged all operators to shut down their servers due to ongoing attacks, with one operator reporting losses of 2,285,545 satoshis.
The project issued the shutdown notice yesterday after discovering a wave of attacks targeting its servers. LNbits has several security fixes in development but hasn't released a fixed version as of 09:00 UTC today. The shutdown came approximately 80 minutes after an initial warning that asked operators to disable the Paywall add-on while the team investigated a potential bug.
Financial Impact
One operator, Kevin Ravensberg, reported that his server was exploited before the shutdown notice, with attackers withdrawing 2,285,545 satoshis (approximately 0.023 bitcoin) between 09:22 and 14:00 UTC yesterday. The attack began more than three hours before the project's first warning at 12:33 UTC.
Project Response
Ben Arc, an LNbits developer, estimated that patches "should be merged and available within 24-48hrs," which would mean between about 14:00 UTC today and 14:00 UTC tomorrow. The project has also shut down all LNbits instances it runs for users on its cloud service, my.lnbits.com, with all services expected back within 24 hours or by about 17:20 UTC today.
Related
