Tip: if you run LNbits, power it off now, isolate the node's spend credentials, and wait for the official patches
- Stop the LNbits service (and any reverse proxy that publishes it) rather than only turning off the Paywall extension.
- Keep the underlying Lightning node's admin macaroons or equivalent spend keys off the stopped web app, and review new accounts plus unexpected withdrawals before you bring it back.
- Get updates only from official LNbits channels; ignore unsolicited "recovery" or patch-download links.
Sources: LNbits shutdown notice (Nov 8)