Blink pauses services after attacker drains custodial accounts
by@TFTC21
Summary
Blink Wallet has paused all services after an attacker successfully drained funds from several custodial accounts, though non-custodial wallets remain unaffected. The company has promised to make every impacted user whole and is working on a patch, but details regarding the total amount stolen and the method of the attack have not yet been disclosed. This incident occurs amidst a challenging period for Lightning Network applications, which have recently faced various security issues, including a bug in BTCPay Server and vulnerabilities in LDK that required urgent attention.
Analysis
Blink: Blink operates a Bitcoin Lightning wallet service with both custodial and non-custodial account options for users. The platform enables Lightning Network transactions and related Bitcoin payments. Following an unauthorized access event, Blink has suspended services while investigating and addressing impacts on certain custodial accounts. blinkbtc: blinkbtc serves as the official X account for the Blink Lightning wallet service. It communicated the decision to pause operations amid an ongoing security investigation into limited account access. Service Response Trends: Platforms impacted by incidents in the Lightning space have moved quickly to implement fixes and commit to user reimbursements. Lightning Ecosystem Challenges: Recent security issues have affected multiple Lightning Network applications, including a critical bug in BTCPay Server and vulnerabilities patched in LDK.
Categories
cryptobitcoinsolanatech