LNbits urges users to shut down servers amid wave of attacks

The open-source Lightning wallet tool told operators to go dark while it prepares multiple security patches after reports of drained funds LNbits, the open-source software many people use to run Bitcoin Lightning Network wallets, has asked every user to shut down their servers. The warning arrived on November 8, 2026, after multiple reports that attackers were creating new accounts and pulling funds out without permission. What happened The alarm followed a string of successful exploits. According to the reports, attackers were able to open fresh accounts on LNbits instances and then withdraw money they had no right to touch. One of the clearest public examples came from @KevinR4v, who runs BitTipBot. The operator reported losing approximately 2,285,545 sats, which works out to about 0.0229 BTC. For readers who don’t count in sats: a sat is the smallest unit of Bitcoin, one hundred-millionth of a single coin. Lightning users tend to think in sats because the network is built for small, fast payments. The BitTipBot attack reportedly ran across a roughly five-hour window. It started at approximately 9:22 UTC and continued until about 14:00 UTC. The BitTipBot operator has said they ar...