Urgent Security Advisory Issued by Lightning Network Tool LNbits
On November 8, LNbits, a popular tool suite within the Lightning Network ecosystem, disseminated a critical security alert via its official social media channels. The advisory confirmed that its systems are currently under sustained, multi-wave cyber attacks.
Immediate Actions Taken by the Development Team
Confronted with this severe security threat, the LNbits development team has mandated a decisive precaution: all users operating LNbits servers are urged to shut them down immediately. This action is not for routine maintenance but is prioritized to safeguard user assets.
The team clarified that the ongoing attack campaign has revealed several security vulnerabilities requiring patches. Engineers are now working at full capacity to develop and test a series of critical fixes.
Recommended User Steps and Next Steps
Until the official patches are released and deployed, the project strongly advises users to adopt the most conservative defense tactic—halting service operation to sever potential attack vectors. This is currently the most effective risk mitigation measure.
- Act Now: Check and shut down any LNbits server instances you host or manage.
- Stay Updated: Monitor LNbits' official channels closely for forthcoming technical updates and secure restoration guidelines.
- Do Not Restart: Avoid restarting the service until explicitly instructed by an official announcement.
The team has committed to completing the remediation work swiftly. A follow-up announcement will be published soon, containing detailed patch notes and a safe recovery procedure.