LNbits Experiences Unauthorized Withdrawals in Security Incident
LNbits suffered a series of attacks resulting in unauthorized fund withdrawals. Users were advised to shut down their servers as the team prepared security patches.
LNbits, an open-source Lightning Network wallet and tools suite, experienced a wave of attacks where unauthorized withdrawals were made from user accounts. Attackers created new accounts on various instances and accessed funds without permission. In response to the incident, the LNbits team urgently instructed all users to shut down their servers while they worked on multiple security patches.
At least one instance reported a loss of approximately 2,285,545 sats, which translates to a loss of about 1,700 USD. The specific mechanism of the attacks was not detailed, but the unauthorized access indicates a significant vulnerability in the account management process. The LNbits team is actively addressing the issue and is expected to release patches soon to enhance security and prevent further incidents.