LNbits Disables Hosted Services and Halts Servers Following Security Breaches

LNbits has disabled its managed hosted services and instructed all server operators to shut down instances immediately following a series of security exploits, leaving users without an official restart timeline. The outages have disrupted point-of-sale, donation, and tipping platforms, including a Telegram tipping bot operator who lost 2,285,545 satoshis (approximately 0.0228 BTC) to unauthorized withdrawals. While developers merged pull request #4310 to address server-side request forgery vulnerabilities and disable default account creation, no official stable patched release had replaced the September 18 v1.6.2 build as of November 9.