Blink, the Bitcoin Lightning Network payments app that grew out of El Salvador’s Bitcoin Beach initiative, halted all of its services on September 19 after discovering that an attacker had drained funds from a limited number of its custodial accounts. The company’s official status page logged the event as a critical “custodial accounts” incident and marked it resolved the following morning. Blink positions itself as the everyday Bitcoin wallet for circular-economy projects across El Salvador, Guatemala, Honduras and Kenya.
A Custodial Breach, Not a Self-Custody Problem
The incident hit custodial accounts specifically — wallets where Blink holds the private keys on behalf of users. Non-custodial users, who manage their own keys through Blink’s Spark protocol, were not affected, and the company was explicit that Spark was not implicated. Blink said a “few dozen” custodial accounts were compromised and that a “large majority of funds are secure,” without disclosing how much was taken. The company credited a multisig cold-storage system paired with smaller hot-wallet components for keeping the damage limited, a design meant to contain exactly this kind of exposure.
A Patch, a Pause and a Promise to Reimburse
Blink paused the app, deployed an emergency patch and, by Saturday evening, said services were back online. In posts on X, the team said it was “working on restoring service as soon as possible” and later confirmed the incident had been verified and fixed. Blink added that every affected account had been identified and “will be made whole,” with a full post-mortem to follow. The precise attack vector has not been published, so the underlying exploit remains unconfirmed and users are waiting for the company to clarify exactly how it happened.
Lightning Wallets Face a Rough Stretch
The breach lands during a difficult period for Lightning Network applications. Core Lightning recently told node operators to upgrade or go offline over AI-related errors, and the network has weathered earlier disclosed vulnerabilities. Bitcoin payment infrastructure has also been under strain elsewhere — BTCPay Server disclosed a critical bug, the Lightning Development Kit flagged two bugs, and the non-custodial swap service Boltz shut down in August. The episode also underscores why Blink has been winding down custodial services in some regions under regulatory pressure and steering users toward its non-custodial Spark wallet, a migration the incident is likely to accelerate.
