LNbits is offline due to a security incident
swiss-enigma.ch & swiss-bitcoin.org
What happened?
On 8 November 2026 the LNbits project asked all operators worldwide to shut down their LNbits servers immediately. On vulnerable instances, attackers were able to create new accounts and use them to withdraw balances they should never have had access to. Several servers were affected – this one among them.
The exact technical details have not yet been published by the LNbits project. A fixed release has been announced but, at the time of this notice, was not yet available.
What does this mean for you?
- Do not send any sats to wallets, Lightning addresses, LNURL or payment links on these domains. They do not work at the moment.
- Bolt Cards linked to this server are temporarily not working.
- You do not need to do anything with your Bolt Card right away – the card itself is not compromised.
Will there be a refund?
No. There will be no refund of the lost sats. A custodial online Lightning account on someone else's server always carries a certain risk and is only suitable for small amounts for spending – not for storing savings. For larger amounts, Bitcoin belongs in your own wallet whose keys only you control.
What happens next?
As soon as LNbits has released a security update and operation is safe again, the server will be brought back online temporarily. This is solely so that you can back up the keys of your Bolt Cards and any other data you have stored.
- Log in and open the Boltcards extension.
- Back up the keys of your card(s) (k0–k4) in a safe place, or reset the card directly with the Bolt Card app (wipe).
- Back up any other data you still need.
- Do not load any new balance onto this server.
I will announce on this page when you can back up the keys and until when the server will be reachable for that.
Operation will be shut down for good
After this window for backing up the keys, I will shut the LNbits server down permanently. The risk is too high for me. As this incident has shown, no matter how many security precautions you take, zero-day vulnerabilities simply cannot be foreseen.