LNbits urges global server shutdown after exploit attacks hit Lightning services

Bitcoin Lightning payment and wallet platform LNbits urged all server operators worldwide to shut down immediately after a series of exploit attacks disrupted parts of its network. LNbits disabled its own cloud-hosted instances on Nov. 8 after signs of unauthorized account creation and withdrawals were detected, and also issued an urgent notice for self-hosted server operators to take their servers offline. Some services, including the Telegram tip bot 'BitTipBot,' were confirmed to have been affected, with about 2.28 million sats stolen. The incident temporarily disrupted key payment infrastructure, including merchant POS payments, online checkout and donation APIs. The development team has merged code into its development branch under PR #4310, including measures to block internal requests and prevent account creation, but an official security patch has not yet been released as the formal version remains at v1.6.2.