Lightning Network applications and platforms continue to face a difficult period, as Blink Wallet announced a temporary halt to its operations following a security breach over the weekend.
“We’ve paused Blink services while we investigate a security incident,” the official Blink Wallet account posted on X on Saturday morning. The team explained that an unauthorized party managed to access a restricted number of custodial accounts and withdraw funds.
Despite the breach, Blink emphasized that the “large majority of funds are secure” and confirmed that non-custodial users remain completely unaffected. In a subsequent update, the platform clarified that a “few dozen custodial accounts were affected by the incident.” While the exact financial total was not disclosed, Blink assured the public that “every affected account is identified and will be made whole.”
This incident arrives amid a broader wave of bugs, exploits, and security breaches impacting cryptocurrency businesses and Lightning Network-specific tools. Recent examples include a critical vulnerability in BTCPay Server that allowed remote attackers to read LND macaroon files, as well as two reported bugs disclosed by the Lightning Development Kit (LDK), which prompted immediate upgrade advisories for users.
Additionally, the non-custodial swap service Boltz disclosed operational issues on August 3, 2026. At the time, the Boltz team noted that “attackers now iterate faster than a team our size can find and patch.” The resulting Boltz shutdown created cascading complications for service providers such as Aqua, Bull Bitcoin, and Zeus. In response to those disruptions, Aqua subsequently introduced its own Liquid–Lightning swap stack, known as Indra.
Frequently Asked Questions
What happened to Blink Wallet?
Blink Wallet suffered a security breach that allowed an attacker to access and drain a “few dozen” custodial accounts, prompting the platform to temporarily pause its services on September 19.
Were non-custodial users affected?
No, non-custodial users were not impacted by the security incident, and the vast majority of funds on the platform remained secure.
Will affected users get their money back?
Yes, Blink Wallet has stated that 100% of the affected users have been identified and that every impacted account will be made whole.
What other platforms have recently faced security issues?
Recent security challenges have also affected BTCPay Server, the Lightning Development Kit (LDK), and the non-custodial swap service Boltz.