TREE NEWS update: LNbits has urged every server operator running its software to shut down their instances following a series of attacks, and the project has disabled its own hosted instances. Contributor Ben Arc said patches should be available within 24 to 48 hours.
LNbits Tells All Server Operators to Shut Down After Attacks
A coordinated shutdown of self-hosted instances is an unusually blunt response, and it signals the project treats the attacks as a code-level problem rather than an isolated operator misconfiguration. The exposure sits with the long tail of independent server operators, who carry the operational risk while the project controls the patch timeline. The open question is whether the 24-to-48-hour window holds and whether operators actually restart on patched code, or drift back online with the same vulnerable deployments.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.