Open-source Bitcoin Lightning wallet LNbits hit by wave of attacks; project tells all operators to shut down servers and takes its hosted service offline

The Hacker News reports that LNbits, an open-source Bitcoin Lightning wallet system, told all operators on Nov 8 to shut down their servers immediately because of a wave of attacks, saying several security fixes are pending ^[1]. According to the report, one operator said new accounts used an exploit to withdraw 2,285,545 satoshis (about 0.023 BTC) from his server, with the attack starting more than three hours before the project's first warning, and the project also switched off its hosted my.lnbits.com instances ^[1]. LNbits operators should keep servers offline as instructed and update before restoring service once fixes are released ^[1].

Industries mainly affected: Finance, Technology

1. Shut down all LNbits servers as instructed by the project until fixed versions are released ^[1].
2. If any server is still running, at minimum disable the Paywall extension named in the first warning ^[1].