LNbits urges users to shut down servers after wave of attacks, security fix pending

On November 10, 2026, LNbits – a Bitcoin‑payment and wallet‑account platform built on the Lightning Network – issued an urgent advisory for all operators to shut down their instances. The notice followed a “wave of attacks” that the project said could compromise payment, checkout and tipping services. While LNbits’ hosted offering was already disabled on November 8 as a precaution, self‑hosted users were instructed to stop their servers until further security updates are provided.

Security changes merged but no stable release yet

According to CryptoSlate, LNbits merged pull request #4310 into its development branch on Nov. 9. The change introduces stronger request protections, blocks the server from making internal requests, and disables new‑account creation by default. However, the merge did not create a new stable release, and the project’s GitHub repository still listed the September 18 v1.6.2 backup hotfix as the latest stable version. The September release only addressed a PostgreSQL backup issue and does not contain the newly merged security fixes.

Impact on merchants and developers

The advisory affects a range of LNbits‑based tools, including point‑of‑sale terminals, online checkout widgets, donation buttons, tipping modules, wallet‑account APIs and both self‑hosted and managed Lightning deployments. Operators who pause their instances will experience interruptions to Bitcoin payment flows and related services. Hosted customers are already offline, with LNbits indicating that services could resume within 24 hours, though no concrete restart timeline has been communicated.

What to watch next

Stakeholders should monitor LNbits’ GitHub releases for a stable version that incorporates the security patches and includes an official restart clearance. Additional updates are expected from the project’s communication channels, which may clarify the scope of the attacks and any further mitigation steps. Users of LNbits‑based payment solutions are advised to stay alert for future advisories and consider temporary alternatives for Bitcoin transactions until the platform is confirmed secure again.