Browse
Reference
Directory
Company
Help & Legal
Follow
Subscribe
Quick Take
Bitcoin payments and wallet-account platform LNbits has called on all users to stop their LNbits servers after reporting a wave of attacks.
Stopping those servers can interrupt payment, checkout, and tipping services while operators await security fixes and clear restart guidance. LNbits said it had security patches to push and would provide further updates.
The project's product description lists point-of-sale tools, online checkout, donation buttons, tipping, wallet accounts, and APIs. It supports both self-hosted and managed deployments over underlying Lightning funding sources.
In a separate Nov. 8 notice, LNbits said it had disabled all instances on its hosted service as a precaution and expected services to resume within 24 hours.
For self-hosted operators, the request is to stop the LNbits instance they run for Bitcoin payments. Hosted customers instead depend on the provider’s action, which LNbits said it had already taken.
LNbits’ shutdown warning follows two hosting paths
Self-hosted operators were told to stop servers; LNbits said it disabled its hosted instances. At the Nov. 9 check, the latest stable release still predated the warning.
The project’s shutdown warning spans both hosting arrangements. A development merge is not a stable security release or restart clearance.
Point-in-time public material, about 18:20 UTC Nov. 9, 2026. Hosted shutdown is attributed to @lnbits; restoration was only an estimate. PR #4310 is not established as the attack remedy, and no restart clearance was visible in the reviewed notices/timeline.
Sources
Supporting facts
Method
Qualitative diagram of two hosting responsibilities and separate stable/development status. Dates and labels come from the selected primary statements and GitHub captures; connector lengths are not elapsed time or measured availability.
Scope
Latest stable release predates the shutdown warning for Bitcoin payments
As of Nov. 9, GitHub’s latest-release API still identified v1.6.2 as LNbits’ latest stable release. Published Sept. 18, its release notes describe a PostgreSQL backup hotfix.
BTCPay’s API key fix is merged as patch goes live
LNbits merged pull request #4310 into its development branch on Nov. 9. The descriptions cover stronger request protections, blocking the server from making requests to itself, and disabling new-account creation by default.
No all-clear was visible on LNbits' public timeline, and neither of its two notices announced restart clearance.
Operators face two separate questions: which released version addresses the incident, and when the project will explicitly clear servers to restart.
Mentioned in this article
Strategy spent more than twice as much on preferred buybacks as Bitcoin last week
Cookie Consent
We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Cookie Preferences
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
CloudFlare provides web performance and security solutions, enhancing site speed and protecting against threats.
Service URL: developers.cloudflare.com (opens in a new window)
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Clarity is a web analytics service that tracks and reports website traffic.
Service URL: clarity.microsoft.com (opens in a new window)
You can find more information in our Privacy Policy and .
Loading image…
This image could not be loaded.
The Catalyst
