no no…
the issue is that if you install LNBits and not NOT set it up and have umbrel exposed on the public internet, then an attacker can do the setup and steal funds by extracting the LND macaroon.
roughly like that.
“public and not fully setup” is the important part here.
bumi
npub1xv…clk3x
2026-01-29 16:30:13 UTC
in reply to nevent1q…9fhv
Author Public Key
npub1xv8mzscll8vvy5rsdw7dcqtd2j268a6yupr6gzqh86f2ulhy9kkqmclk3xPublished at
2026-01-29 16:30:13 UTCEvent JSON
{
"id": "48ad14c3cab74dcd77407c6f023bcb060268ba9787fed97882907dc3d85877b1",
"pubkey": "330fb1431ff9d8c250706bbcdc016d5495a3f744e047a408173e92ae7ee42dac",
"created_at": 1769704213,
"kind": 1,
"tags": [
[
"e",
"f1e877b9133ebe2bfd1c279919e04a00f5ec8a568e6c4674e61893c662aecd26",
"wss://nostr.oxtr.dev/",
"root",
"5d3ab876c206a37ad3b094e20bfc3941df3fa21a15ac8ea76d6918473789669a"
],
[
"e",
"48114f7cd18002e8a54b84a103c8fa600e43338cc19bfc8b262522e77435de1f",
"wss://relay.primal.net",
"reply"
],
[
"p",
"5d3ab876c206a37ad3b094e20bfc3941df3fa21a15ac8ea76d6918473789669a",
"",
"mention"
],
[
"p",
"c1fc7771f5fa418fd3ac49221a18f19b42ccb7a663da8f04cbbf6c08c80d20b1",
"",
"mention"
]
],
"content": "no no…\n\nthe issue is that if you install LNBits and not NOT set it up and have umbrel exposed on the public internet, then an attacker can do the setup and steal funds by extracting the LND macaroon. \nroughly like that.\n\n“public and not fully setup” is the important part here. \n\n",
"sig": "ccc578a8327cd7b70b410ad3b9a59c5a6bb0071fa38bfed2977c56b384ce5ab8b7543db1b1c4dec69ac878b608fa8a9350283099b7aa40b7feb6ff644fb3c795"
}