Wednesday, November 11, 2026

LNbits, the Bitcoin payments and wallet-account platform, has called on all users to stop their servers following a wave of reported attacks.

Halting those servers may interrupt payment, checkout, and tipping services while operators await security fixes and clear restart guidance. The project confirmed it has security patches ready and will provide further updates.

The platform’s product description lists point-of-sale tools, online checkout, donation buttons, tipping, wallet accounts, and APIs. It supports both self-hosted and managed deployments over underlying Lightning funding sources.

In a separate notice dated Nov. 8, LNbits said it had disabled all instances on its hosted service as a precaution and expected services to resume within 24 hours.

For self-hosted operators, the request is to stop the LNbits instance they run for Bitcoin payments. Hosted customers instead depend on the provider’s action, which LNbits said it had already taken.

LNbits shutdown scope and release statusOne warning branches to self-hosted operator action and a reported managed-service shutdown. A separate release-status diagram distinguishes the old stable version from a new development merge.SHUTDOWN SCOPE · NOV. 8@lnbitsStop LNbits serversSELF-HOSTEDHOSTED BY LNBITSOperator instructed to stopLNbits says it disabledTheir LNbits serverAll hosted instancesRELEASE STATUS · NOV. 9, ABOUT 18:20 UTCSTABLESept. 18Nov. 9 checkv1.6.2Backup hotfixStill latest stableDEVELOPMENTPR #4310 merged into devNov. 9 · development event, not a stable releaseLNbits shutdown scope and release statusOne warning branches to self-hosted operator action and a reported managed-service shutdown. A separate release-status diagram distinguishes the old stable version from a new development merge.SHUTDOWN SCOPE · NOV. 8@lnbitsStop LNbits serversSELF-HOSTEDHOSTED BY LNBITSOperator toldto stopLNbits saysit disabledTheir serverAll hosted instancesRELEASE STATUSNov. 9 · about 18:20 UTCSTABLESept. 18 · v1.6.2PostgreSQL backup hotfixNov. 9 · still latest stableDEVELOPMENTNov. 9 · PR #4310Merged into dev

As of Nov. 9, GitHub’s latest-release API still identified v1.6.2 as LNbits’ latest stable release, published Sept. 18 with release notes describing a PostgreSQL backup hotfix.

LNbits merged pull request #4310 into its development branch on Nov. 9. The descriptions cover stronger request protections, blocking the server from making requests to itself, and disabling new-account creation by default.

No all-clear was visible on LNbits’ public timeline, and neither of its two notices announced restart clearance.

Operators face two separate questions: which released version addresses the incident, and when the project will explicitly clear servers to restart.

Source link

Exit mobile version