LNbits urges operators to shut down servers after attacks
Original title: LNbits Urges All Operators to Shut Down Their Bitcoin Lightning Wallet Servers Amid Attacks
LNbits urges all operators to shut down servers and disable the Paywall add-on while security fixes are prepared after attacks.
LNbits, a free open-source Bitcoin Lightning wallet system, warned all operators to shut down their servers due to a wave of attacks. A specific operator reported an exploit that withdrew 2,285,545 satoshis before the first warning. The project released a narrower warning about disabling Paywall 80 minutes prior and is preparing patches expected within 24-48 hours. Its cloud service my.lnbits.com was also shut down temporarily.
Unconfirmed: The exact extension exploit used has not been named
- One operator lost 2,285,545 satoshis (~0.023 BTC) before shutdown notice
- Attack ran from 09:22 to 14:00 UTC yesterday
- Patches expected in 24-48 hours
- LNbits instances on cloud service back within 24 hours
- Does not affect Lightning nodes or other wallet software
Impact: unauthorized withdrawal of funds from LNbits servers
- 1.shut down servers
- 2.disable Paywall add-on
From the original article
2 min read at thehackernews.com
Everyone running LNbits, a free, open-source Bitcoin Lightning wallet system, should shut down their servers now because of a wave of attacks, the project said yesterday. It has several security fixes to release and asked operators to be careful until they are out. One operator said new accounts used an exploit to withdraw 2,285,545 satoshis, about 0.
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.