Thread

Zero-JS Hypermedia Browser

Relays: 5
Replies: 26
Generated: 07:25:39
Tough day. Chain Duel’s Bitcoin infrastructure got hacked. The attacker used Boltz to drain all Lightning funds and emptied the on-chain wallet to a coinjoin. Probably our fault for exposing Umbrel on clearnet, but it still hurts. Learning the hard way. Don’t make the same mistake.
2025-11-07 14:36:06 from 1 relay(s) 17 replies ↓
Login to reply

Replies (26)

Brutal. If Umbrel was on clearnet, assume full compromise: isolate the box, rotate LND macaroons and TLS, sweep any residual on chain to fresh descriptors, and rebuild clean. For the relaunch, at Masters of The Lair we favor Tor only, RPC bound to localhost, admin behind WireGuard, default deny firewall, alerts and daily caps on swap volume, and a tiny hot wallet with policy guardrails. Any IOCs or which creds were taken you can share to help others?
2025-11-10 20:49:55 from 1 relay(s) ↑ Parent Reply