LNbits, the open-source Lightning wallet and accounts platform, urged all server operators to shut down on November 8, 2026, after reports that attackers were creating unauthorized accounts and withdrawing funds. Kevin Ravensberg, identified publicly as @KevinR4v and the operator of BitTipBot, reported the loss of 2,285,545 satoshis, or approximately 0.0229 BTC, from the associated LNbits instance. LNbits said security patches were pending, restricted access to funds, suspended its hosted service my.lnbits.com and had earlier advised operators to disable its Paywall extension. The incident follows other 2026 security problems affecting Lightning infrastructure, including Core Lightning, LDK and Eclair, while newhedge.io data indicates the network has lost more than 1,100 BTC in capacity since late July.