Skip to content
LNbits Issues Urgent Shutdown Advisory Amid Ongoing Attacks

LNbits Issues Urgent Shutdown Advisory Amid Ongoing Attacks

First seen 9 Nov 2026, 10:47 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 9, 2026 at 10:48 UTC
  • •LNbits has advised all users to shut down their servers due to ongoing attacks.
  • •Attackers exploited vulnerabilities to create accounts and withdraw funds without permission.
  • •The BitTipBot operator reported a loss of approximately 0.0229 BTC during the attack.

LNbits, an open-source software for Bitcoin Lightning Network wallets, has urged users to shut down their servers following reports of unauthorized fund withdrawals. This warning was issued on November 8, 2026, after multiple instances of attackers creating new accounts and draining funds. A notable case involved the BitTipBot operator, who lost approximately 2,285,545 sats (0.0229 BTC). The attack spanned about five hours, from 9:22 UTC to 14:00 UTC. LNbits is currently developing multiple security patches, expected to be released within 24 to 48 hours. Users are advised to remain offline until these patches are implemented. This incident highlights the risks associated with self-hosted tools, as each operator must act independently to secure their servers. No immediate market reaction has been noted, and the losses are relatively small in the context of Bitcoin.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2026-11-08
LNbits issues shutdown advisory
LNbits warned users to shut down servers after reports of unauthorized fund withdrawals. Multiple accounts were exploited to drain funds.
Cryptonews
2026-11-08
BitTipBot attack reported
The operator of BitTipBot reported losing approximately 2,285,545 sats due to the exploit, which occurred over a five-hour window.
Cryptonews

More articles in this cluster (4)

Following this threat?

Track BitTipBot in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (3)

1 / 2

Common questions

What should LNbits users do now?
Users should immediately shut down their LNbits servers and await security patches from the developers.
How long until the security patches are released?
LNbits expects to release the security patches within 24 to 48 hours from the advisory.
What is the extent of the financial loss reported?
The BitTipBot operator reported a loss of approximately 2,285,545 sats, equivalent to about 0.0229 BTC.